Windows 11 Group Policy settings
3,580 settings · 24H2 · 1.0 · 30 Sep 2024 · latest is 25H2 · 1.0
- Allow active content from CDs to run on user machines
- Allow Install On Demand (except Internet Explorer)
- Allow Install On Demand (Internet Explorer)
- Allow Internet Explorer to use the HTTP2 network protocol
- Allow Internet Explorer to use the SPDY/3 network protocol
- Allow software to run or install even if the signature is invalid
- Allow third-party browser extensions
- Always send Do Not Track header
- Automatically check for Internet Explorer updates
- Check for server certificate revocation
- Check for signatures on downloaded programs
- Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled
- Do not allow resetting Internet Explorer settings
- Do not save encrypted pages to disk
- Empty Temporary Internet Files folder when browser is closed
- Play animations in web pages
- Play sounds in web pages
- Play videos in web pages
- Turn off ClearType
- Turn off encryption support
- Turn off loading websites and content in the background to optimize performance
- Turn off Profile Assistant
- Turn off sending UTF-8 query strings for URLs
- Turn off the flip ahead with page prediction feature
- Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows
- Turn on Caret Browsing support
- Turn on Enhanced Protected Mode
- Use HTTP 1.1
- Use HTTP 1.1 through proxy connections
Windows 11 · template release
24H2 · 1.0
Published 30 Sep 2024 · 3,580 settings · 5 releases kept
78 new settings, 46 changed, 1 removed since 23H2 · 1.0
Changed in 24H2 · 1.0 124 settings
- Disconnect remote session on lock for legacy authentication
- Set exclusions from Remote Encryption Protection
- Allow access to BitLocker-protected fixed data drives from earlier versions of Windows
- Allow access to BitLocker-protected removable data drives from earlier versions of Windows
- Allow audio input in Windows Sandbox
- Allow clipboard sharing with Windows Sandbox
- Allow legacy functionality for Internet Shortcut files
- Allow mapping folders into Windows Sandbox
- Allow name-based strong mappings for certificates
- Allow networking in Windows Sandbox
- Allow printer sharing with Windows Sandbox
- Allow retrieving the Azure AD Kerberos Ticket Granting Ticket during logon