Windows 11 Group Policy settings
3,503 settings · 23H2 · 1.0 · 15 Jul 2024 · latest is 25H2 · 1.0
- Allow user control over installs
- Allow users to browse for source while elevated
- Allow users to patch elevated products
- Allow users to use media source while elevated
- Always install with elevated privileges
- Control maximum size of baseline file cache
- Enforce upgrade component rules
- Prevent embedded UI
- Prevent Internet Explorer security prompt for Windows Installer scripts
- Prevent users from using Windows Installer to install updates and upgrades
- Prohibit flyweight patching
- Prohibit non-administrators from applying vendor signed updates
- Prohibit removal of updates
- Prohibit rollback
- Prohibit use of Restart Manager
- Prohibit User Installs
- Remove browse dialog box for new source
- Save copies of transform files in a secure location on workstation
- Specify the types of events Windows Installer records in its transaction log
- Turn off creation of System Restore checkpoints
- Turn off logging via package settings
- Turn off shared components
- Turn off Windows Installer
Windows 11 · template release
23H2 · 1.0
Published 15 Jul 2024 · 3,503 settings · 5 releases kept
7 new settings, 8 changed since 22H2 · 3.0
Changed in 23H2 · 1.0 15 settings
- Automatic Data Collection
- Configure authorized password decryptors
- Configure password backup directory
- Configure size of encrypted password history
- Dev drive filter attach policy
- Disallow downloads from Microsoft Connected Cache servers when the device connects via VPN
- Enable dev drive
- Enable optional updates
- Name of administrator account to manage
- Password Settings
- Post-authentication actions
- Turn off account notifications in Start