feat: add 5B non-sec regkeys

[smiezah-msft]

This PR introduces the May “5B” non-security registry key updates to ensure consistency and compliance with the latest Windows image configuration requirements for AKS node provisioning.
What’s included

Added/updated non-security (non-sec) registry keys aligned with 5B requirements
Ensured keys are applied across relevant Windows SKUs/images used in AgentBaker
Maintained parity with upstream Windows image expectations and servicing guidance

**Why this change
Enables alignment with monthly Patch Tuesday (5B cycle) configuration updates
Ensures AKS node images remain consistent with latest platform expectations
Prevents drift between base OS images and AgentBaker-applied configuration

**Validation
✅ Verified registry key presence post-image bake
✅ Confirmed no regression in image provisioning / node pool creation
✅ Validated against current test pipelines (Hyper-V / containerd scenarios)

**Risk / Impact
Low risk – non-security configuration only
No expected impact to existing workloads or cluster behavior
Changes are scoped strictly to registry configuration

Notes

Follows established monthly release pattern for non-sec updates
Complements security fixes delivered separately in Patch Tuesday cycle

[azure-pipelines]

There was an error handling pipeline event f49f2e81-ad11-48df-8bf8-530d6ce48272.

[github-actions]

Changes cached containers or packages on windows VHDs

Please get a Windows SIG member to approve.

The following dif file shows any additions or deletions from what will be cached on windows VHDs organised by VHD type.

• Additions are new things cached.
• Deletions are things no longer cached.

diff --git a/vhd_files/2022-containerd-gen2.txt b/vhd_files/2022-containerd-gen2.txt
index a67cc2d..eed28d7 100644
--- a/vhd_files/2022-containerd-gen2.txt
+++ b/vhd_files/2022-containerd-gen2.txt
@@ -43,0 +44 @@ HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\14
+HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\1491587726=1
@@ -67,0 +69 @@ HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\36
+HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\3658215055=1
@@ -73,0 +76 @@ HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\41
+HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\4173449358=1
diff --git a/vhd_files/2022-containerd.txt b/vhd_files/2022-containerd.txt
index abc0646..a2afb5f 100644
--- a/vhd_files/2022-containerd.txt
+++ b/vhd_files/2022-containerd.txt
@@ -43,0 +44 @@ HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\14
+HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\1491587726=1
@@ -67,0 +69 @@ HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\36
+HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\3658215055=1
@@ -73,0 +76 @@ HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\41
+HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\4173449358=1
diff --git a/vhd_files/2025-gen2.txt b/vhd_files/2025-gen2.txt
index 7c9a9ca..13dfc34 100644
--- a/vhd_files/2025-gen2.txt
+++ b/vhd_files/2025-gen2.txt
@@ -31,0 +32,2 @@ c:\akse-cache\win-vnet-cni\: https://packages.aks.azure.com/azure-cni/v1.6.21/bi
+HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\1451608719=1
+HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\1861198479=1
diff --git a/vhd_files/2025.txt b/vhd_files/2025.txt
index 9a53a2a..976caa8 100644
--- a/vhd_files/2025.txt
+++ b/vhd_files/2025.txt
@@ -31,0 +32,2 @@ c:\akse-cache\win-vnet-cni\: https://packages.aks.azure.com/azure-cni/v1.6.21/bi
+HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\1451608719=1
+HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides\1861198479=1

[Copilot]

Pull request overview

Adds the May 2026 “5B” non-security Windows registry key updates to the Windows VHD build configuration, keeping baked images aligned with current Windows servicing guidance for AKS.

Changes:

• Added new FeatureManagement\\Overrides registry values for Windows Server 2022 SKUs.
• Added new FeatureManagement\\Overrides registry values for Windows Server 2025 SKUs.