Windows 11 Group Policy settings
3,580 settings · 24H2 · 1.0 · 30 Sep 2024 · latest is 25H2 · 1.0
- Add the Administrators security group to roaming user profiles
- Control slow network connection timeout for user profiles
- Delete cached copies of roaming profiles
- Delete user profiles older than a specified number of days on system restart
- Disable detection of slow network connections
- Do not check for user ownership of Roaming Profile Folders
- Do not forcefully unload the users registry at user logoff
- Do not log users on with temporary profiles
- Download roaming profiles on primary computers only
- Establish timeout value for dialog boxes
- Leave Windows Installer and Group Policy Software Installation Data
- Maximum retries to unload and update user profile
- Only allow local user profiles
- Prevent Roaming Profile changes from propagating to the server
- Prompt user when a slow network connection is detected
- Set maximum wait time for the network if a user has a roaming user profile or remote home directory
- Set roaming profile path for all users logging onto this computer
- Set the schedule for background upload of a roaming user profile's registry file while user is logged on
- Set user home folder
- Turn off the advertising ID
- User management of sharing user name, account picture, and domain information with apps (not desktop apps)
- Wait for remote user profile
Windows 11 · template release
24H2 · 1.0
Published 30 Sep 2024 · 3,580 settings · 5 releases kept
78 new settings, 46 changed, 1 removed since 23H2 · 1.0
Changed in 24H2 · 1.0 124 settings
- Disconnect remote session on lock for legacy authentication
- Set exclusions from Remote Encryption Protection
- Allow access to BitLocker-protected fixed data drives from earlier versions of Windows
- Allow access to BitLocker-protected removable data drives from earlier versions of Windows
- Allow audio input in Windows Sandbox
- Allow clipboard sharing with Windows Sandbox
- Allow legacy functionality for Internet Shortcut files
- Allow mapping folders into Windows Sandbox
- Allow name-based strong mappings for certificates
- Allow networking in Windows Sandbox
- Allow printer sharing with Windows Sandbox
- Allow retrieving the Azure AD Kerberos Ticket Granting Ticket during logon