Windows 11 Group Policy settings
3,621 settings · 25H2 · 1.0 · 29 Sep 2025
- Fixed Data Drives7
- Operating System Drives19
- Removable Data Drives8
- Choose default folder for recovery password
- Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)
- Choose drive encryption method and cipher strength (Windows 8, Windows Server 2012, Windows 8.1, Windows Server 2012 R2, Windows 10 [Version 1507])
- Choose drive encryption method and cipher strength (Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2)
- Choose how users can recover BitLocker-protected drives (Windows Server 2008 and Windows Vista)
- Disable new DMA devices when this computer is locked
- Prevent memory overwrite on restart
- Provide the unique identifiers for your organization
- Store BitLocker recovery information in Active Directory Domain Services (Windows Server 2008 and Windows Vista)
- Validate smart card certificate usage rule compliance
Windows 11 · template release
25H2 · 1.0
Published 29 Sep 2025 · 3,621 settings · 5 releases kept
42 new settings, 29 changed, 1 removed since 24H2 · 1.0
Changed in 25H2 · 1.0 71 settings
- Configure Multiple Display Mode
- Set Cloned Monitor Preferred Resolution Source
- Absolute Max Cache Size (in GB)
- Allow export of Recall and snapshot information
- Allow Keyboard Filter in remote sessions
- Allow name-based strong mappings for certificates
- Allow Recall to be enabled
- Allow theme files from network locations
- Allow Updates in OOBE
- Allow uploads while the device is on battery while under set Battery level (percentage)
- Allowed package family names for non-admin user install
- Audit client does not support signing