Windows 11 Group Policy settings
3,621 settings · 25H2 · 1.0 · 29 Sep 2025
- DC Locator DNS Records20
- Allow cryptography algorithms compatible with Windows NT 4.0
- Contact PDC on logon failure
- Log Enhanced Domain-wide NTLM Logs
- Set Netlogon share compatibility
- Set scavenge interval
- Set SYSVOL share compatibility
- Specify expected dial-up delay on logon
- Specify log file debug output level
- Specify maximum log file size
- Specify negative DC Discovery cache setting
- Specify positive periodic DC Cache refresh for non-background callers
- Specify site name
- Use final DC discovery retry setting for background callers
- Use initial DC discovery retry setting for background callers
- Use maximum DC discovery retry interval setting for background callers
- Use positive periodic DC cache refresh for background callers
- Use urgent mode when pinging domain controllers
Windows 11 · template release
25H2 · 1.0
Published 29 Sep 2025 · 3,621 settings · 5 releases kept
42 new settings, 29 changed, 1 removed since 24H2 · 1.0
Changed in 25H2 · 1.0 71 settings
- Configure Multiple Display Mode
- Set Cloned Monitor Preferred Resolution Source
- Absolute Max Cache Size (in GB)
- Allow export of Recall and snapshot information
- Allow Keyboard Filter in remote sessions
- Allow name-based strong mappings for certificates
- Allow Recall to be enabled
- Allow theme files from network locations
- Allow Updates in OOBE
- Allow uploads while the device is on battery while under set Battery level (percentage)
- Allowed package family names for non-admin user install
- Audit client does not support signing