What you need to know
How should Windows Admin Center extensions be distributed to connected and isolated gateways?
Potentially affected
Administrators installing or updating Windows Admin Center extensions.
DSE recommendation
Maintain an approved package list with version, publisher, purpose, and operational owner.
Source facts
Windows Admin Center tools and connection types are extensions that can be installed, removed, and updated individually. The platform can use multiple NuGet V2 feeds or file shares, while its default feed contains packages from Microsoft and other developers. For a computer without feed access, Microsoft documents downloading extension packages and supplying them through a local drive or file share. Microsoft Learn.
Applicability
Identify the gateway, its internet or proxy access, the required extension, and the package publisher. Review the configured feeds before assuming every available package is supplied by Microsoft. Keep extension lifecycle decisions separate from upgrading the gateway installation.
DSE recommendation
Maintain an approved package list with version, publisher, purpose, and operational owner. Choose a controlled feed or distribution share appropriate to the gateway connectivity. Have a reviewer verify the package source before promotion to an isolated environment. Record the installed version and an agreed way to remove or replace the extension if it fails the pilot.
Verification
Install the selected extension on a representative gateway and open the intended tool against a test connection. Compare the installed version with the approved package and verify that the gateway can retrieve updates through the intended feed. Record unexpected publishers, duplicate sources, or unavailable dependencies before wider distribution.
Official references
Microsoft Learn: Install and Manage Extensions. Source reviewed September 8, 2026.
Review the official source
Install and Manage Extensions · Verified September 8, 2026
Need help applying this guidance safely?
DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.
Talk with DSE