Windows 10 Group Policy settings
3,381 settings · 22H2 · 1.0 · 15 Jul 2024
- Allow devices compliant with InstantGo or HSTI to opt out of pre-boot PIN.
- Allow enhanced PINs for startup
- Allow network unlock at startup
- Allow Secure Boot for integrity validation
- Choose how BitLocker-protected operating system drives can be recovered
- Configure minimum PIN length for startup
- Configure pre-boot recovery message and URL
- Configure TPM platform validation profile (Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2)
- Configure TPM platform validation profile for BIOS-based firmware configurations
- Configure TPM platform validation profile for native UEFI firmware configurations
- Configure use of hardware-based encryption for operating system drives
- Configure use of passwords for operating system drives
- Disallow standard users from changing the PIN or password
- Enable use of BitLocker authentication requiring preboot keyboard input on slates
- Enforce drive encryption type on operating system drives
- Require additional authentication at startup
- Require additional authentication at startup (Windows Server 2008 and Windows Vista)
- Reset platform validation data after BitLocker recovery
- Use enhanced Boot Configuration Data validation profile
Windows 10 · template release
22H2 · 1.0
Published 15 Jul 2024 · 3,381 settings · 2 releases kept
270 new settings, 359 changed, 18 removed since 1607 · 2.0
Changed in 22H2 · 1.0 629 settings
- Absolute Max Cache Size (in GB)
- Allow "Save Target As" in Internet Explorer mode
- Allow a shared Books folder
- Allow Address bar drop-down list suggestions
- Allow Adobe Flash
- Allow antimalware service to remain running always
- Allow antimalware service to startup with normal priority
- Allow asynchronous user Group Policy processing when logging on through Remote Desktop Services
- Allow auditing events in Microsoft Defender Application Guard
- Allow Automatic Update of Speech Data
- Allow Automatic Updates immediate installation
- Allow camera and microphone access in Microsoft Defender Application Guard