Windows 11 Group Policy settings
3,621 settings · 25H2 · 1.0 · 29 Sep 2025
- Client Interface3
- Device Control10
- Exclusions5
- Features3
- MAPS4
- Microsoft Defender Exploit Guard8
- MpEngine4
- Network Inspection System6
- Quarantine2
- Real-time Protection16
- Remediation11
- Reporting10
- Scan33
- Security Intelligence Updates18
- Threats2
- Allow antimalware service to remain running always
- Allow antimalware service to startup with normal priority
- Configure detection for potentially unwanted applications
- Configure local administrator merge behavior for lists
- Configure scheduled task times randomization window
- Control whether exclusions are visible to local users
- Control whether or not exclusions are visible to Local Admins
- Define addresses to bypass proxy server
- Define proxy auto-config (.pac) for connecting to the network
- Define proxy server for connecting to the network
- Define the directory path to copy support log files
- Randomize scheduled task times
- Select the channel for Microsoft Defender daily security intelligence updates
- Select the channel for Microsoft Defender monthly engine updates
- Select the channel for Microsoft Defender monthly platform updates
- Turn off Microsoft Defender Antivirus
- Turn off routine remediation
Windows 11 · template release
25H2 · 1.0
Published 29 Sep 2025 · 3,621 settings · 5 releases kept
42 new settings, 29 changed, 1 removed since 24H2 · 1.0
Changed in 25H2 · 1.0 71 settings
- Configure Multiple Display Mode
- Set Cloned Monitor Preferred Resolution Source
- Absolute Max Cache Size (in GB)
- Allow export of Recall and snapshot information
- Allow Keyboard Filter in remote sessions
- Allow name-based strong mappings for certificates
- Allow Recall to be enabled
- Allow theme files from network locations
- Allow Updates in OOBE
- Allow uploads while the device is on battery while under set Battery level (percentage)
- Allowed package family names for non-admin user install
- Audit client does not support signing