Windows 11 Group Policy settings
3,580 settings · 24H2 · 1.0 · 30 Sep 2024 · latest is 25H2 · 1.0
- Access-Denied Assistance2
- App-V31
- Audit Process Creation1
- Credentials Delegation12
- Device Guard2
- Device Health Attestation Service1
- Device Installation23
- Disk NV Cache4
- Disk Quotas6
- Display3
- Distributed COM2
- Driver Installation2
- Early Launch Antimalware1
- Enhanced Storage Access7
- File Classification Infrastructure2
- File Share Shadow Copy Provider1
- Filesystem14
- Folder Redirection2
- Group Policy77
- Internet Communication Management23
- iSCSI10
- KDC8
- Kerberos16
- Kernel DMA Protection1
- LAPS10
- Local Security Authority2
- Locale Services6
- Logon23
- Mitigation Options2
- Net Logon36
- OS Policies5
- PIN Complexity8
- Power Management51
- Recovery1
- Remote Assistance6
- Remote Procedure Call6
- Removable Storage Access19
- Scripts8
- Security Account Manager2
- Server Manager3
- Service Control Manager Settings1
- Shutdown1
- Shutdown Options1
- Storage Health1
- Storage Sense6
- System Restore2
- Troubleshooting and Diagnostics29
- Trusted Platform Module Services9
- User Profiles22
- Windows File Protection4
- Windows Time Service4
- Activate Shutdown Event Tracker System State Data feature
- Allow Distributed Link Tracking clients to use domain resources
- Configure the behavior of the sudo command
- Display highly detailed status messages
- Display Shutdown Event Tracker
- Do not automatically encrypt files moved to encrypted folders
- Do not display Manage Your Server page at logon
- Do not turn off system power after a Windows system shutdown has occurred.
- Download missing COM components
- Enable Persistent Time Stamp
- Hide messages when Windows system requirements are not met
- Remove Boot / Shutdown / Logon / Logoff status messages
- Restrict potentially unsafe HTML Help functions to specified folders
- Restrict these programs from being launched from Help
- Specify settings for optional component installation and component repair
- Specify Windows installation file location
- Specify Windows Service Pack installation file location
- Turn off Data Execution Prevention for HTML Help Executible
Windows 11 · template release
24H2 · 1.0
Published 30 Sep 2024 · 3,580 settings · 5 releases kept
78 new settings, 46 changed, 1 removed since 23H2 · 1.0
Changed in 24H2 · 1.0 124 settings
- Disconnect remote session on lock for legacy authentication
- Set exclusions from Remote Encryption Protection
- Allow access to BitLocker-protected fixed data drives from earlier versions of Windows
- Allow access to BitLocker-protected removable data drives from earlier versions of Windows
- Allow audio input in Windows Sandbox
- Allow clipboard sharing with Windows Sandbox
- Allow legacy functionality for Internet Shortcut files
- Allow mapping folders into Windows Sandbox
- Allow name-based strong mappings for certificates
- Allow networking in Windows Sandbox
- Allow printer sharing with Windows Sandbox
- Allow retrieving the Azure AD Kerberos Ticket Granting Ticket during logon