Microsoft is rolling out the second 19H2 build for Insiders in the Slow Ring today, that features more under the hood changes, which are set as off by default for the time being. Microsoft says it will be shipping these changes as off as it wants to test a new control method for enabling these features with the next 19H2 build.

Here's the full changelog:

  • Windows containers require matched host and container version. This restricts customers and limits Windows containers from supporting mixed-version container pod scenarios This update includes 5 fixes to address this and allow the host to run down-level containers on up-level for process (Argon) isolation.
  • A fix to allow OEMs to reduce the inking latency based on the hardware capabilities of their devices rather than being stuck with latency selected on typical hardware configuration by the OS.
  • Key-rolling or Key-rotation feature enables secure rolling of Recovery passwords on MDM managed AAD devices upon on demand request from in-tune/MDM tools or upon every time recovery password is used to unlock the BitLocker protected drive. This feature will help prevent accidental recovery password disclosure as part of manual BitLocker drive unlock by users.
  • A change to enable third-party digital assistants to voice activate above the Lock screen.

As noted by the blog post:

Please note that these changes and improvements are currently OFF by default in this build. As mentioned previously, we may ship features in these updates turned off by default and turn them on via controlled feature rollouts. Doing this helps us gain better feedback on overall build quality. With today's 19H2 build, we are testing this experience. Our plan is to quickly follow-up with another 19H2 build that turns these features on for a subset of Insiders and proceed from there based on feedback and quality.

Build 18362.10005 is rolling out in the Slow ring now. Make sure you update to it!