Windows 11 Group Policy settings
3,621 settings · 25H2 · 1.0 · 29 Sep 2025
- Allow certificates with no extended key usage certificate attribute
- Allow ECC certificates to be used for logon and authentication
- Allow Integrated Unblock screen to be displayed at the time of logon
- Allow signature keys valid for Logon
- Allow time invalid certificates
- Allow user name hint
- Configure root certificate clean up
- Display string when smart card is blocked
- Filter duplicate logon certificates
- Force the reading of all certificates from the smart card
- Notify user of successful smart card driver installation
- Prevent plaintext PINs from being returned by Credential Manager
- Reverse the subject name stored in a certificate when displaying
- Turn on certificate propagation from smart card
- Turn on root certificate propagation from smart card
- Turn on Smart Card Plug and Play service
Windows 11 · template release
25H2 · 1.0
Published 29 Sep 2025 · 3,621 settings · 5 releases kept
42 new settings, 29 changed, 1 removed since 24H2 · 1.0
Changed in 25H2 · 1.0 71 settings
- Configure Multiple Display Mode
- Set Cloned Monitor Preferred Resolution Source
- Absolute Max Cache Size (in GB)
- Allow export of Recall and snapshot information
- Allow Keyboard Filter in remote sessions
- Allow name-based strong mappings for certificates
- Allow Recall to be enabled
- Allow theme files from network locations
- Allow Updates in OOBE
- Allow uploads while the device is on battery while under set Battery level (percentage)
- Allowed package family names for non-admin user install
- Audit client does not support signing