Windows 11 Group Policy settings

Windows 11 · template release

26H2 · 1.0

Published 29 Sep 2026 · 3,686 settings · 6 releases kept

65 new settings, 21 changed, 1 moved or renamed since 25H2 · 1.0

Changed in 26H2 · 1.0 87 settings

• Disconnect remote session on lock for legacy authentication ChangedWindows Components › Remote Desktop Services › Remote Desktop Session Host › Security
• Agent Connector Access Policy NewWindows Components › Windows AI
• Agent Consent Duration NewWindows Components › Windows AI
• Allow file group descriptor operations to write to any destination path NewWindows Components › File Explorer
• Allow IP address-based SPNs during Kerberos authentication NewSystem › Kerberos
• Allow offline scan from trusted Windows Recovery Environment NewSystem › Recovery
• Allow user profile registry hives and AppData from non-standard paths NewSystem › User Profiles
• Automatic Certificate Deployment via Updates NewWindows Components › Secure Boot
• Certificate Deployment via Controlled Feature Rollout NewWindows Components › Secure Boot
• Configure Agent Connectors NewWindows Components › Windows AI
• Configure Applications preference logging and tracing NewSystem › Group Policy › Logging and tracing
• Configure Camera Options NewWindows Components › Camera

List all 87 in the navigator