Windows 11 Group Policy settings
3,580 settings · 24H2 · 1.0 · 30 Sep 2024 · latest is 25H2 · 1.0
- Allow DNS suffix appending to unqualified multi-label name queries
- Allow NetBT queries for fully qualified domain names
- Configure Discovery of Designated Resolvers (DDR) protocol
- Configure encrypted name resolution
- Configure multicast DNS (mDNS) protocol
- Configure NetBIOS settings
- Connection-specific DNS suffix
- DNS servers
- DNS suffix search list
- Dynamic update
- IDN mapping
- Prefer link local responses over DNS when received over a network with higher precedence
- Primary DNS suffix
- Primary DNS suffix devolution
- Primary DNS suffix devolution level
- Register DNS records with connection-specific DNS suffix
- Register PTR records
- Registration refresh interval
- Replace addresses in conflicts
- TTL value for A and PTR records
- Turn off default IPv6 DNS Servers
- Turn off IDN encoding
- Turn off multicast name resolution
- Turn off smart multi-homed name resolution
- Turn off smart protocol reordering
- Update security level
- Update top level domain zones
Windows 11 · template release
24H2 · 1.0
Published 30 Sep 2024 · 3,580 settings · 5 releases kept
78 new settings, 46 changed, 1 removed since 23H2 · 1.0
Changed in 24H2 · 1.0 124 settings
- Disconnect remote session on lock for legacy authentication
- Set exclusions from Remote Encryption Protection
- Allow access to BitLocker-protected fixed data drives from earlier versions of Windows
- Allow access to BitLocker-protected removable data drives from earlier versions of Windows
- Allow audio input in Windows Sandbox
- Allow clipboard sharing with Windows Sandbox
- Allow legacy functionality for Internet Shortcut files
- Allow mapping folders into Windows Sandbox
- Allow name-based strong mappings for certificates
- Allow networking in Windows Sandbox
- Allow printer sharing with Windows Sandbox
- Allow retrieving the Azure AD Kerberos Ticket Granting Ticket during logon