Windows 11 Group Policy settings
3,621 settings · 25H2 · 1.0 · 29 Sep 2025
- Add-on Management9
- AJAX7
- Binary Behavior Security Restriction5
- Consistent Mime Handling3
- Local Machine Zone Lockdown Security3
- Mime Sniffing Safety Feature3
- MK Protocol Security Restriction3
- Network Protocol Lockdown8
- Notification bar3
- Object Caching Protection3
- Protection From Zone Elevation3
- Restrict ActiveX Install3
- Restrict File Download3
- Scripted Window Security Restrictions3
- Allow fallback to SSL 3.0 (Internet Explorer)
- Do not display the reveal password button
- Turn off Data Execution Prevention
- Turn off Data URI support
Windows 11 · template release
25H2 · 1.0
Published 29 Sep 2025 · 3,621 settings · 5 releases kept
42 new settings, 29 changed, 1 removed since 24H2 · 1.0
Changed in 25H2 · 1.0 71 settings
- Configure Multiple Display Mode
- Set Cloned Monitor Preferred Resolution Source
- Absolute Max Cache Size (in GB)
- Allow export of Recall and snapshot information
- Allow Keyboard Filter in remote sessions
- Allow name-based strong mappings for certificates
- Allow Recall to be enabled
- Allow theme files from network locations
- Allow Updates in OOBE
- Allow uploads while the device is on battery while under set Battery level (percentage)
- Allowed package family names for non-admin user install
- Audit client does not support signing