Windows 10 Group Policy settings
3,381 settings · 22H2 · 1.0 · 15 Jul 2024
- Access data sources across domains
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow OpenSearch queries in File Explorer
- Allow previewing and custom thumbnails of OpenSearch query results in File Explorer
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Don't run antimalware programs against ActiveX controls
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Navigate windows and frames across different domains
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
Windows 10 · template release
22H2 · 1.0
Published 15 Jul 2024 · 3,381 settings · 2 releases kept
270 new settings, 359 changed, 18 removed since 1607 · 2.0
Changed in 22H2 · 1.0 629 settings
- Absolute Max Cache Size (in GB)
- Allow "Save Target As" in Internet Explorer mode
- Allow a shared Books folder
- Allow Address bar drop-down list suggestions
- Allow Adobe Flash
- Allow antimalware service to remain running always
- Allow antimalware service to startup with normal priority
- Allow asynchronous user Group Policy processing when logging on through Remote Desktop Services
- Allow auditing events in Microsoft Defender Application Guard
- Allow Automatic Update of Speech Data
- Allow Automatic Updates immediate installation
- Allow camera and microphone access in Microsoft Defender Application Guard