Windows 10 Group Policy settings
3,381 settings · 22H2 · 1.0 · 15 Jul 2024
- Configure Start pages Windows Components › Microsoft Edge
- Configure Storage Sense cadence System › Storage Sense
- Configure Storage Sense Cloud Content dehydration threshold System › Storage Sense
- Configure Storage Sense Recycle Bin cleanup threshold System › Storage Sense
- Configure Storage Storage Downloads cleanup threshold System › Storage Sense
- Configure telemetry opt-in change notifications. Windows Components › Data Collection and Preview Builds
- Configure telemetry opt-in setting user interface. Windows Components › Data Collection and Preview Builds
- Configure the 'Block at First Sight' feature Windows Components › Microsoft Defender Antivirus › MAPS
- Configure the Adobe Flash Click-to-Run setting Windows Components › Microsoft Edge
- Configure the Commercial ID Windows Components › Data Collection and Preview Builds
- Configure the inclusion of Edge tabs into Alt-Tab Windows Components › Multitasking
- Configure the mode of automatically signing in and locking last interactive user after a restart or cold boot Windows Components › Windows Logon Options
- Configure the system to clear the TPM if it is not in a ready state. System › Trusted Platform Module Services
- Configure the system to use legacy Dictionary Attack Prevention Parameters setting for TPM 2.0. System › Trusted Platform Module Services
- Configure time out for detections in critically failed state Windows Components › Microsoft Defender Antivirus › Reporting
- Configure time out for detections in non-critical failed state Windows Components › Microsoft Defender Antivirus › Reporting
- Configure time out for detections in recently remediated state Windows Components › Microsoft Defender Antivirus › Reporting
- Configure time out for detections requiring additional action Windows Components › Microsoft Defender Antivirus › Reporting
- Configure Traditional Chinese IME version Windows Components › IME
- Configure Watson events Windows Components › Microsoft Defender Antivirus › Reporting
- Configure web-to-app linking with app URI handlers System › Group Policy
- Configure which channel of Microsoft Edge to use for opening redirected sites Windows Components › Internet Explorer
- Configure Windows Defender SmartScreen Windows Components › Microsoft Edge
- Configure Windows Defender SmartScreen Windows Components › Windows Defender SmartScreen › Microsoft Edge
- Configure Windows Defender SmartScreen Windows Components › Windows Defender SmartScreen › Explorer
- Configure Windows Defender SmartScreen Windows Components › File Explorer
- Configure Windows NTP Client System › Windows Time Service › Time Providers
- Configure Windows software trace preprocessor components Windows Components › Microsoft Defender Antivirus › Reporting
- Configure WPP tracing level Windows Components › Microsoft Defender Antivirus › Reporting
- Continue experiences on this device System › Group Policy
- Control whether or not exclusions are visible to Local Admins. Windows Components › Microsoft Defender Antivirus
- Create a system restore point Windows Components › Microsoft Defender Antivirus › Scan
- Define addresses to bypass proxy server Windows Components › Microsoft Defender Antivirus
- Define device control policy groups Windows Components › Microsoft Defender Antivirus › Device Control
- Define device control policy rules Windows Components › Microsoft Defender Antivirus › Device Control
- Define file shares for downloading security intelligence updates Windows Components › Microsoft Defender Antivirus › Security Intelligence Updates
- Define proxy auto-config (.pac) for connecting to the network Windows Components › Microsoft Defender Antivirus
- Define proxy server for connecting to the network Windows Components › Microsoft Defender Antivirus
- Define security intelligence location for VDI clients. Windows Components › Microsoft Defender Antivirus › Security Intelligence Updates
- Define the maximum size of downloaded files and attachments to be scanned Windows Components › Microsoft Defender Antivirus › Real-time Protection
- Define the number of days after which a catch-up scan is forced Windows Components › Microsoft Defender Antivirus › Scan
- Define the number of days after which a catch-up security intelligence update is required Windows Components › Microsoft Defender Antivirus › Security Intelligence Updates
- Define the number of days before spyware security intelligence is considered out of date Windows Components › Microsoft Defender Antivirus › Security Intelligence Updates
- Define the number of days before virus security intelligence is considered out of date Windows Components › Microsoft Defender Antivirus › Security Intelligence Updates
- Define the order of sources for downloading security intelligence updates Windows Components › Microsoft Defender Antivirus › Security Intelligence Updates
- Delay Background download Cache Server fallback (in seconds) Windows Components › Delivery Optimization
- Delay background download from http (in secs) Windows Components › Delivery Optimization
- Delay Foreground download Cache Server fallback (in seconds) Windows Components › Delivery Optimization
- Delay Foreground download from http (in secs) Windows Components › Delivery Optimization
- Deploy Windows Defender Application Control System › Device Guard
- DFS Management Windows Components › Microsoft Management Console › Restricted/Permitted snap-ins
- DFS Management Extension Windows Components › Microsoft Management Console › Restricted/Permitted snap-ins › Extension snap-ins
- Disable all apps from Microsoft Store Windows Components › Store
- Disable context menus in the Start Menu Start Menu and Taskbar
- Disable deleting diagnostic data Windows Components › Data Collection and Preview Builds
- Disable diagnostic data viewer. Windows Components › Data Collection and Preview Builds
- Disable HTML Application Windows Components › Internet Explorer
- Disable Internet Explorer 11 as a standalone browser Windows Components › Internet Explorer
- Disable lockdown of Start pages Windows Components › Microsoft Edge
- Disable new DMA devices when this computer is locked Windows Components › BitLocker Drive Encryption
- Disable OneSettings Downloads Windows Components › Data Collection and Preview Builds
- Disable safeguards for Feature Updates Windows Components › Windows Update › Windows Update for Business
- Disable the Clear TPM button Windows Components › Windows Security › Device security
- Disk Management Extension Windows Components › Microsoft Management Console › Restricted/Permitted snap-ins › Extension snap-ins
- Display additional text to clients when they need to perform an action Windows Components › Microsoft Defender Antivirus › Client Interface
- Display options for update notifications Windows Components › Windows Update
- Do not allow Clipboard redirection Windows Components › Remote Desktop Services › Remote Desktop Session Host › Device and Resource Redirection
- Do not allow font smoothing Windows Components › Remote Desktop Services › Remote Desktop Session Host › Remote Session Environment
- Do not allow update deferral policies to cause scans against Windows Update Windows Components › Windows Update
- Do not allow video capture redirection Windows Components › Remote Desktop Services › Remote Desktop Session Host › Device and Resource Redirection
- Do not allow WebAuthn redirection Windows Components › Remote Desktop Services › Remote Desktop Session Host › Device and Resource Redirection
- Do not keep history of recently opened documents Start Menu and Taskbar
- Do not send a Windows error report when a generic driver is installed on a device System › Device Installation
- Do Not Show Anchor Windows Components › Windows Media Player › User Interface
- Do Not Show First Use Dialog Boxes Windows Components › Windows Media Player
- Do not use diagnostic data for tailored experiences Windows Components › Cloud Content
- Do not use Remote Desktop Session Host server IP address when virtual IP address is not available Windows Components › Remote Desktop Services › Remote Desktop Session Host › Application Compatibility
- Domains categorized as both work and personal Network › Network Isolation
- Don't allow this PC to be projected to Windows Components › Connect
- Don't launch privacy settings experience on user logon Windows Components › OOBE
- Don't search the web or display web results in Search Windows Components › Search
- Download Mode Windows Components › Delivery Optimization
- Enable App-V Client System › App-V
- Enable auto-subscription
- Enable automatic cleanup of unused appv packages System › App-V › PackageManagement
- Enable automatic MDM enrollment using default Azure AD credentials Windows Components › MDM
- Enable background sync to server when on battery power System › App-V › PowerManagement
- Enable Device Control Printing Restrictions Printers
- Enable Device Control Printing Restrictions Control Panel › Printers
- Enable Device Health Attestation Monitoring and Reporting System › Device Health Attestation Service
- Enable extended hot keys in Internet Explorer mode Windows Components › Internet Explorer
- Enable file hash computation feature Windows Components › Microsoft Defender Antivirus › MpEngine
- Enable global window list in Internet Explorer mode Windows Components › Internet Explorer
- Enable headless UI mode Windows Components › Microsoft Defender Antivirus › Client Interface
- Enable news and interests on the taskbar Windows Components › News and interests
- Enable OneSettings Auditing Windows Components › Data Collection and Preview Builds
- Enable Peer Caching while the device connects via VPN Windows Components › Delivery Optimization
- Enable svchost.exe mitigation options System › Service Control Manager Settings › Security Settings
- Enable UEV Windows Components › Microsoft User Experience Virtualization
- Enable Windows to soft-disconnect a computer from a network Network › Windows Connection Manager
Windows 10 · template release
22H2 · 1.0
Published 15 Jul 2024 · 3,381 settings · 2 releases kept
270 new settings, 359 changed, 18 removed since 1607 · 2.0
Changed in 22H2 · 1.0 629 settings
- Absolute Max Cache Size (in GB)
- Allow "Save Target As" in Internet Explorer mode
- Allow a shared Books folder
- Allow Address bar drop-down list suggestions
- Allow Adobe Flash
- Allow antimalware service to remain running always
- Allow antimalware service to startup with normal priority
- Allow asynchronous user Group Policy processing when logging on through Remote Desktop Services
- Allow auditing events in Microsoft Defender Application Guard
- Allow Automatic Update of Speech Data
- Allow Automatic Updates immediate installation
- Allow camera and microphone access in Microsoft Defender Application Guard