Windows 10 Group Policy settings
3,381 settings · 22H2 · 1.0 · 15 Jul 2024
- Absolute Max Cache Size (in GB) Windows Components › Delivery Optimization
- Allow "Save Target As" in Internet Explorer mode Windows Components › Internet Explorer
- Allow a shared Books folder Windows Components › Microsoft Edge
- Allow Address bar drop-down list suggestions Windows Components › Microsoft Edge
- Allow Adobe Flash Windows Components › Microsoft Edge
- Allow antimalware service to remain running always Windows Components › Microsoft Defender Antivirus
- Allow antimalware service to startup with normal priority Windows Components › Microsoft Defender Antivirus
- Allow asynchronous user Group Policy processing when logging on through Remote Desktop Services System › Group Policy
- Allow auditing events in Microsoft Defender Application Guard Windows Components › Microsoft Defender Application Guard
- Allow Automatic Update of Speech Data Windows Components › Speech
- Allow Automatic Updates immediate installation Windows Components › Windows Update
- Allow camera and microphone access in Microsoft Defender Application Guard Windows Components › Microsoft Defender Application Guard
- Allow clearing browsing data on exit Windows Components › Microsoft Edge
- Allow Clipboard History System › OS Policies
- Allow Clipboard synchronization across devices System › OS Policies
- Allow Cloud Search Windows Components › Search
- Allow commercial data pipeline Windows Components › Data Collection and Preview Builds
- Allow configuration updates for the Books Library Windows Components › Microsoft Edge
- Allow Cortana Windows Components › Search
- Allow Cortana above lock screen Windows Components › Search
- Allow Cortana Page in OOBE on an AAD account Windows Components › Search
- Allow data persistence for Microsoft Defender Application Guard Windows Components › Microsoft Defender Application Guard
- Allow Desktop Analytics Processing Windows Components › Data Collection and Preview Builds
- Allow desktop composition for remote desktop sessions Windows Components › Remote Desktop Services › Remote Desktop Session Host › Remote Session Environment
- Allow device name to be sent in Windows diagnostic data Windows Components › Data Collection and Preview Builds
- Allow devices compliant with InstantGo or HSTI to opt out of pre-boot PIN. Windows Components › BitLocker Drive Encryption › Operating System Drives
- Allow downloading updates to the Disk Failure Prediction Model System › Storage Health
- Allow enumeration of emulated smart card for all users Windows Components › Windows Hello for Business
- Allow extended telemetry for the Books tab Windows Components › Microsoft Edge
- Allow files to download and save to the host operating system from Microsoft Defender Application Guard Windows Components › Microsoft Defender Application Guard
- Allow FullScreen Mode Windows Components › Microsoft Edge
- Allow Graphing Calculator Windows Components › Calculator
- Allow hardware-accelerated rendering for Microsoft Defender Application Guard Windows Components › Microsoft Defender Application Guard
- Allow installation of devices that match any of these device instance IDs System › Device Installation › Device Installation Restrictions
- Allow Message Service Cloud Sync Windows Components › Messaging
- Allow Microsoft Compatibility List Windows Components › Microsoft Edge
- Allow Microsoft Defender Application Guard to use Root Certificate Authorities from the user’s device Windows Components › Microsoft Defender Application Guard
- Allow Microsoft Edge to pre-launch at Windows startup, when the system is idle, and each time Microsoft Edge is closed Windows Components › Microsoft Edge
- Allow Microsoft Edge to start and load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed Windows Components › Microsoft Edge
- Allow non-administrators to install drivers for these device setup classes System › Driver Installation
- Allow non-administrators to receive update notifications Windows Components › Windows Update
- Allow notifications to disable security intelligence based reports to Microsoft MAPS Windows Components › Microsoft Defender Antivirus › Security Intelligence Updates
- Allow Online Tips Control Panel
- Allow only approved domains to use the TDC ActiveX control Windows Components › Internet Explorer › Internet Control Panel › Security Page › Internet Zone
- Allow only approved domains to use the TDC ActiveX control Windows Components › Internet Explorer › Internet Control Panel › Security Page › Locked-Down Internet Zone
- Allow only approved domains to use the TDC ActiveX control Windows Components › Internet Explorer › Internet Control Panel › Security Page › Intranet Zone
- Allow only approved domains to use the TDC ActiveX control Windows Components › Internet Explorer › Internet Control Panel › Security Page › Locked-Down Intranet Zone
- Allow only approved domains to use the TDC ActiveX control Windows Components › Internet Explorer › Internet Control Panel › Security Page › Local Machine Zone
- Allow only approved domains to use the TDC ActiveX control Windows Components › Internet Explorer › Internet Control Panel › Security Page › Locked-Down Local Machine Zone
- Allow only approved domains to use the TDC ActiveX control Windows Components › Internet Explorer › Internet Control Panel › Security Page › Restricted Sites Zone
- Allow only approved domains to use the TDC ActiveX control Windows Components › Internet Explorer › Internet Control Panel › Security Page › Locked-Down Restricted Sites Zone
- Allow only approved domains to use the TDC ActiveX control Windows Components › Internet Explorer › Internet Control Panel › Security Page › Trusted Sites Zone
- Allow only approved domains to use the TDC ActiveX control Windows Components › Internet Explorer › Internet Control Panel › Security Page › Locked-Down Trusted Sites Zone
- Allow printing Windows Components › Microsoft Edge
- Allow publishing of User Activities System › OS Policies
- Allow real-time security intelligence updates based on reports to Microsoft MAPS Windows Components › Microsoft Defender Antivirus › Security Intelligence Updates
- Allow remote start of unlisted programs Windows Components › Remote Desktop Services › Remote Desktop Session Host › Connections
- Allow retrieving the cloud kerberos ticket during the logon System › Kerberos
- Allow Saving History Windows Components › Microsoft Edge
- Allow Screen Saver Windows Components › Windows Media Player › Playback
- Allow search and Cortana to use location Windows Components › Search
- Allow search engine customization Windows Components › Microsoft Edge
- Allow search highlights Windows Components › Search
- Allow security intelligence updates from Microsoft Update Windows Components › Microsoft Defender Antivirus › Security Intelligence Updates
- Allow security intelligence updates when running on battery power Windows Components › Microsoft Defender Antivirus › Security Intelligence Updates
- Allow Sideloading of extension Windows Components › Microsoft Edge
- Allow Storage Sense System › Storage Sense
- Allow Storage Sense Temporary Files cleanup System › Storage Sense
- Allow Telemetry Windows Components › Data Collection and Preview Builds
- Allow time zone redirection Windows Components › Remote Desktop Services › Remote Desktop Session Host › Device and Resource Redirection
- Allow uninstallation of language features when a language is uninstalled Windows Components › Text Input
- Allow Update Compliance Processing Windows Components › Data Collection and Preview Builds
- Allow updates to be downloaded automatically over metered connections Windows Components › Windows Update
- Allow upload of User Activities System › OS Policies
- Allow uploads while the device is on battery while under set Battery level (percentage) Windows Components › Delivery Optimization
- Allow users to enable online speech recognition services Control Panel › Regional and Language Options
- Allow users to pause scan Windows Components › Microsoft Defender Antivirus › Scan
- Allow VBScript to run in Internet Explorer Windows Components › Internet Explorer › Internet Control Panel › Security Page › Internet Zone
- Allow VBScript to run in Internet Explorer Windows Components › Internet Explorer › Internet Control Panel › Security Page › Locked-Down Local Machine Zone
- Allow VBScript to run in Internet Explorer Windows Components › Internet Explorer › Internet Control Panel › Security Page › Locked-Down Internet Zone
- Allow VBScript to run in Internet Explorer Windows Components › Internet Explorer › Internet Control Panel › Security Page › Intranet Zone
- Allow VBScript to run in Internet Explorer Windows Components › Internet Explorer › Internet Control Panel › Security Page › Locked-Down Intranet Zone
- Allow VBScript to run in Internet Explorer Windows Components › Internet Explorer › Internet Control Panel › Security Page › Trusted Sites Zone
- Allow VBScript to run in Internet Explorer Windows Components › Internet Explorer › Internet Control Panel › Security Page › Locked-Down Trusted Sites Zone
- Allow VBScript to run in Internet Explorer Windows Components › Internet Explorer › Internet Control Panel › Security Page › Restricted Sites Zone
- Allow VBScript to run in Internet Explorer Windows Components › Internet Explorer › Internet Control Panel › Security Page › Locked-Down Restricted Sites Zone
- Allow VBScript to run in Internet Explorer Windows Components › Internet Explorer › Internet Control Panel › Security Page › Local Machine Zone
- Allow WUfB Cloud Processing Windows Components › Data Collection and Preview Builds
- Always install with elevated privileges Windows Components › Windows Installer
- Always show desktop on connection Windows Components › Remote Desktop Services › Remote Desktop Session Host › Remote Session Environment
- Always show the Books Library in Microsoft Edge Windows Components › Microsoft Edge
- Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria System › Device Installation › Device Installation Restrictions
- Block all consumer Microsoft account user authentication Windows Components › Microsoft account
- Block launching Universal Windows apps with Windows Runtime API access from hosted content. Windows Components › App runtime
- Cache Server Hostname Windows Components › Delivery Optimization
- Cache Server Hostname Source Windows Components › Delivery Optimization
- Check for the latest virus and spyware security intelligence before running a scheduled scan Windows Components › Microsoft Defender Antivirus › Scan
- Check for the latest virus and spyware security intelligence on startup Windows Components › Microsoft Defender Antivirus › Security Intelligence Updates
- Cloud Policy Details Windows Components › Tenant Restrictions
- Code signing for driver packages System › Driver Installation
Windows 10 · template release
22H2 · 1.0
Published 15 Jul 2024 · 3,381 settings · 2 releases kept
270 new settings, 359 changed, 18 removed since 1607 · 2.0
Changed in 22H2 · 1.0 629 settings
- Absolute Max Cache Size (in GB)
- Allow "Save Target As" in Internet Explorer mode
- Allow a shared Books folder
- Allow Address bar drop-down list suggestions
- Allow Adobe Flash
- Allow antimalware service to remain running always
- Allow antimalware service to startup with normal priority
- Allow asynchronous user Group Policy processing when logging on through Remote Desktop Services
- Allow auditing events in Microsoft Defender Application Guard
- Allow Automatic Update of Speech Data
- Allow Automatic Updates immediate installation
- Allow camera and microphone access in Microsoft Defender Application Guard