Windows 10 Group Policy settings
3,381 settings · 22H2 · 1.0 · 15 Jul 2024
- Specify additional definition sets for network traffic inspection Windows Components › Microsoft Defender Antivirus › Network Inspection System
- Specify contact company name Windows Components › Windows Security › Enterprise Customization
- Specify contact email address or Email ID Windows Components › Windows Security › Enterprise Customization
- Specify contact phone number or Skype ID Windows Components › Windows Security › Enterprise Customization
- Specify contact website Windows Components › Windows Security › Enterprise Customization
- Specify deadline before auto-restart for update installation Windows Components › Windows Update
- Specify deadlines for automatic updates and restarts Windows Components › Windows Update
- Specify default behavior for a new tab Windows Components › Internet Explorer
- Specify Engaged restart transition and notification schedule for updates Windows Components › Windows Update
- Specify global DNS Network › Network Connectivity Status Indicator
- Specify intranet Microsoft update service location Windows Components › Windows Update
- Specify passive polling Network › Network Connectivity Status Indicator
- Specify source service for specific classes of Windows Updates Windows Components › Windows Update
- Specify the day of the week to check for security intelligence updates Windows Components › Microsoft Defender Antivirus › Security Intelligence Updates
- Specify the day of the week to run a scheduled full scan to complete remediation Windows Components › Microsoft Defender Antivirus › Remediation
- Specify the day of the week to run a scheduled scan Windows Components › Microsoft Defender Antivirus › Scan
- Specify the interval to check for security intelligence updates Windows Components › Microsoft Defender Antivirus › Security Intelligence Updates
- Specify the interval to run quick scans per day Windows Components › Microsoft Defender Antivirus › Scan
- Specify the maximum depth to scan archive files Windows Components › Microsoft Defender Antivirus › Scan
- Specify the maximum log file size (KB) Windows Components › Event Log Service › Security
- Specify the maximum percentage of CPU utilization during a scan Windows Components › Microsoft Defender Antivirus › Scan
- Specify the maximum size of archive files to be scanned Windows Components › Microsoft Defender Antivirus › Scan
- Specify the scan type to use for a scheduled scan Windows Components › Microsoft Defender Antivirus › Scan
- Specify the time for a daily quick scan Windows Components › Microsoft Defender Antivirus › Scan
- Specify the time of day to run a scheduled full scan to complete remediation Windows Components › Microsoft Defender Antivirus › Remediation
- Specify the time of day to run a scheduled scan Windows Components › Microsoft Defender Antivirus › Scan
- Specify the time to check for security intelligence updates Windows Components › Microsoft Defender Antivirus › Security Intelligence Updates
- Specify threat alert levels at which default action should not be taken when detected Windows Components › Microsoft Defender Antivirus › Threats
- Specify threats upon which default action should not be taken when detected Windows Components › Microsoft Defender Antivirus › Threats
- Specify Work Folders settings Windows Components › Work Folders
- SSL Cipher Suite Order Network › SSL Configuration Settings
- Standard User Lockout Duration System › Trusted Platform Module Services
- Start Layout Start Menu and Taskbar
- Start the scheduled scan only when computer is on but not in use Windows Components › Microsoft Defender Antivirus › Scan
- Storage Manager for SANs Windows Components › Microsoft Management Console › Restricted/Permitted snap-ins
- Storage Manager for SANS Extension Windows Components › Microsoft Management Console › Restricted/Permitted snap-ins › Extension snap-ins
- Streaming Media Protocols Windows Components › Windows Media Player › Networking
- Subnet definitions are authoritative Network › Network Isolation
- Suppress all notifications Windows Components › Microsoft Defender Antivirus › Client Interface
- Suppress the display of Edge Deprecation Notification Windows Components › Microsoft Edge
- Suppresses reboot notifications Windows Components › Microsoft Defender Antivirus › Client Interface
- Toggle user control over Insider builds Windows Components › Data Collection and Preview Builds
- Troubleshooting: Allow users to access recommended troubleshooting for known problems System › Troubleshooting and Diagnostics › Microsoft Support Diagnostic Tool
- Turn off Auto Exclusions Windows Components › Microsoft Defender Antivirus › Exclusions
- Turn off auto-restart notifications for update installations Windows Components › Windows Update
- Turn off calls during Quiet Hours Start Menu and Taskbar › Notifications
- Turn off cloud optimized content Windows Components › Cloud Content
- Turn off enhanced notifications Windows Components › Microsoft Defender Antivirus › Reporting
- Turn off Fair Share CPU Scheduling Windows Components › Remote Desktop Services › Remote Desktop Session Host › Connections
- Turn off GdiDPIScaling for applications System › Display
- Turn off Microsoft Defender Antivirus Windows Components › Microsoft Defender Antivirus
- Turn off notifications network usage Start Menu and Taskbar › Notifications
- Turn off Power Throttling System › Power Management › Power Throttling Settings
- Turn off Push To Install service Windows Components › Push To Install
- Turn off Quiet Hours Start Menu and Taskbar › Notifications
- Turn off real-time protection Windows Components › Microsoft Defender Antivirus › Real-time Protection
- Turn off routine remediation Windows Components › Microsoft Defender Antivirus
- Turn off smart card emulation Windows Components › Windows Hello for Business
- Turn off the Windows Welcome Experience Windows Components › Cloud Content
- Turn off Windows Installer RDS Compatibility Windows Components › Remote Desktop Services › Remote Desktop Session Host › Application Compatibility
- Turn off Windows Key hotkeys Windows Components › File Explorer
- Turn off Windows Spotlight on Action Center Windows Components › Cloud Content
- Turn off Windows Spotlight on Settings Windows Components › Cloud Content
- Turn on behavior monitoring Windows Components › Microsoft Defender Antivirus › Real-time Protection
- Turn on catch-up full scan Windows Components › Microsoft Defender Antivirus › Scan
- Turn on catch-up quick scan Windows Components › Microsoft Defender Antivirus › Scan
- Turn on cloud candidate for CHS Windows Components › IME
- Turn on convenience PIN sign-in System › Logon
- Turn on definition retirement Windows Components › Microsoft Defender Antivirus › Network Inspection System
- Turn on e-mail scanning Windows Components › Microsoft Defender Antivirus › Scan
- Turn on GdiDPIScaling for applications System › Display
- Turn on heuristics Windows Components › Microsoft Defender Antivirus › Scan
- Turn on lexicon update Windows Components › IME
- Turn on Live Sticker Windows Components › IME
- Turn on Microsoft Defender Application Guard in Managed Mode Windows Components › Microsoft Defender Application Guard
- Turn on multiple expanded toast notifications in action center Start Menu and Taskbar › Notifications
- Turn on process scanning whenever real-time protection is enabled Windows Components › Microsoft Defender Antivirus › Real-time Protection
- Turn on protocol recognition Windows Components › Microsoft Defender Antivirus › Network Inspection System
- Turn on raw volume write notifications Windows Components › Microsoft Defender Antivirus › Real-time Protection
- Turn on recommended updates via Automatic Updates Windows Components › Windows Update
- Turn on Remote Desktop IP Virtualization Windows Components › Remote Desktop Services › Remote Desktop Session Host › Application Compatibility
- Turn on removal of items from scan history folder Windows Components › Microsoft Defender Antivirus › Scan
- Turn on reparse point scanning Windows Components › Microsoft Defender Antivirus › Scan
- Turn on scan after security intelligence update Windows Components › Microsoft Defender Antivirus › Security Intelligence Updates
- Turn on security key sign-in System › Logon
- Turn On Virtualization Based Security System › Device Guard
- Turn On/Off Find My Device Windows Components › Find My Device
- Unlock Home Button Windows Components › Microsoft Edge
- Update Power Policy for Cart Restarts Windows Components › Windows Update
- Use a common set of exploit protection settings Windows Components › Microsoft Defender Exploit Guard › Exploit Protection
- Use a hardware security device Windows Components › Windows Hello for Business
- Use biometrics Windows Components › Windows Hello for Business
- Use certificate for on-premises authentication Windows Components › Windows Hello for Business
- Use cloud trust for on-premises authentication Windows Components › Windows Hello for Business
- Use hardware graphics adapters for all Remote Desktop Services sessions Windows Components › Remote Desktop Services › Remote Desktop Session Host › Remote Session Environment
- Use PIN Recovery Windows Components › Windows Hello for Business
- Use RD Connection Broker load balancing Windows Components › Remote Desktop Services › Remote Desktop Session Host › RD Connection Broker
- Use WDDM graphics display driver for Remote Desktop Connections Windows Components › Remote Desktop Services › Remote Desktop Session Host › Remote Session Environment
- Use Windows Hello for Business Windows Components › Windows Hello for Business
- Use Windows Hello for Business certificates as smart card certificates Windows Components › Windows Hello for Business
Windows 10 · template release
22H2 · 1.0
Published 15 Jul 2024 · 3,381 settings · 2 releases kept
270 new settings, 359 changed, 18 removed since 1607 · 2.0
Changed in 22H2 · 1.0 629 settings
- Absolute Max Cache Size (in GB)
- Allow "Save Target As" in Internet Explorer mode
- Allow a shared Books folder
- Allow Address bar drop-down list suggestions
- Allow Adobe Flash
- Allow antimalware service to remain running always
- Allow antimalware service to startup with normal priority
- Allow asynchronous user Group Policy processing when logging on through Remote Desktop Services
- Allow auditing events in Microsoft Defender Application Guard
- Allow Automatic Update of Speech Data
- Allow Automatic Updates immediate installation
- Allow camera and microphone access in Microsoft Defender Application Guard