Windows 11 Group Policy settings
3,621 settings · 25H2 · 1.0 · 29 Sep 2025
- Configure Multiple Display Mode System › Display
- Set Cloned Monitor Preferred Resolution Source System › Display
- Absolute Max Cache Size (in GB) Windows Components › Delivery Optimization
- Allow export of Recall and snapshot information Windows Components › Windows AI
- Allow Keyboard Filter in remote sessions System › Keyboard Filter
- Allow name-based strong mappings for certificates System › KDC
- Allow Recall to be enabled Windows Components › Windows AI
- Allow theme files from network locations Desktop
- Allow Updates in OOBE Windows Components › OOBE
- Allow uploads while the device is on battery while under set Battery level (percentage) Windows Components › Delivery Optimization
- Allowed package family names for non-admin user install Windows Components › App Package Deployment
- Audit client does not support signing Network › Lanman Server
- Audit SMB client SPN support Network › Lanman Server
- Configure Start Pins Start Menu and Taskbar
- Configure Taskbar Small Button Behavior Start Menu and Taskbar
- Configure Windows protected print Printers
- Delay Background download Cache Server fallback (in seconds) Windows Components › Delivery Optimization
- Delay background download from http (in seconds) Windows Components › Delivery Optimization
- Delay Foreground download Cache Server fallback (in seconds) Windows Components › Delivery Optimization
- Delay Foreground download from http (in seconds) Windows Components › Delivery Optimization
- Disable Click to Do Windows Components › Windows AI
- Disable Cocreator Windows Components › Paint
- Disable generative fill Windows Components › Paint
- Disable Image Creator Windows Components › Paint
- Disable Internet Explorer 11 Launch Via COM Automation Windows Components › Internet Explorer
- Disable Settings agentic search experience Windows Components › Windows AI
- Disable Widgets Board Windows Components › Widgets
- Disable Widgets On Lock Screen Windows Components › Widgets
- Disabled SMB over QUIC Server Exception List Network › Lanman Workstation
- Do not sync accessibility settings Windows Components › Sync your settings
- Do not sync language preferences settings Windows Components › Sync your settings
- Enable / disable CLFS logfile authentication System › Filesystem
- Enable Energy Saver to Always Be On System › Power Management › Energy Saver Settings
- Enable enhanced shell experience for RemoteApp Windows Components › Remote Desktop Services › Remote Desktop Session Host › Remote Session Environment
- Enable P2P while the device connects via VPN Windows Components › Delivery Optimization
- Enable Windows Backup Windows Components › Sync your settings
- Force Onlooker Detection Windows Components › Human Presence
- Force Onlooker Detection Action Windows Components › Human Presence
- Hide Category view in the Start Menu Start Menu and Taskbar
- Let Windows apps make use of Text and image generation features of Windows Windows Components › App Privacy
- Log Enhanced Domain-wide NTLM Logs System › Net Logon
- Max Cache Age (in seconds) Windows Components › Delivery Optimization
- Max Cache Size (percentage) Windows Components › Delivery Optimization
- Maximum Background Download Bandwidth (in KB/s) Windows Components › Delivery Optimization
- Maximum Background Download Bandwidth (percentage) Windows Components › Delivery Optimization
- Maximum Foreground Download Bandwidth (in KB/s) Windows Components › Delivery Optimization
- Maximum Foreground Download Bandwidth (percentage) Windows Components › Delivery Optimization
- Minimum Background QoS (in KB/s) Windows Components › Delivery Optimization
- Minimum disk size allowed to use P2P (in GB) Windows Components › Delivery Optimization
- Minimum P2P Content File Size (in MB) Windows Components › Delivery Optimization
- Minimum RAM capacity (inclusive) required to enable use of P2P (in GB) Windows Components › Delivery Optimization
- Monthly Upload Data Cap (in GB) Windows Components › Delivery Optimization
- NTLM Enhanced Logging System › NTLM
- Prevent automatic download of applications associated with device metadata System › Device Installation
- Remove Default Microsoft Store packages from the system. Windows Components › App Package Deployment
- Require IPPS for IPP printers Printers
- Select a method to restrict Peer Selection Windows Components › Delivery Optimization
- Select the source of Group IDs Windows Components › Delivery Optimization
- Set a list of apps to be filtered from snapshots for Recall Windows Components › Windows AI
- Set a list of URIs to be filtered from snapshots for Recall Windows Components › Windows AI
- Set authorized domains for HTTPS authentication in MSIX streaming install Windows Components › App Package Deployment
- Set Business Hours to Limit Background Download Bandwidth Windows Components › Delivery Optimization
- Set Business Hours to Limit Foreground Download Bandwidth Windows Components › Delivery Optimization
- Set Copilot Hardware Key Windows Components › Windows Copilot
- Set maximum duration for storing snapshots used by Recall Windows Components › Windows AI
- Set maximum storage for snapshots used by Recall Windows Components › Windows AI
- Set TLS/SSL security policy for IPP printers Printers
- Show notification bell icon Start Menu and Taskbar
- Turn off abbreviated time and date format Start Menu and Taskbar
- Turn off Advanced Settings source integration in File Explorer Windows Components › File Explorer
- Turn off saving snapshots for use with Recall Windows Components › Windows AI
Windows 11 · template release
25H2 · 1.0
Published 29 Sep 2025 · 3,621 settings · 5 releases kept
42 new settings, 29 changed, 1 removed since 24H2 · 1.0
Changed in 25H2 · 1.0 71 settings
- Configure Multiple Display Mode
- Set Cloned Monitor Preferred Resolution Source
- Absolute Max Cache Size (in GB)
- Allow export of Recall and snapshot information
- Allow Keyboard Filter in remote sessions
- Allow name-based strong mappings for certificates
- Allow Recall to be enabled
- Allow theme files from network locations
- Allow Updates in OOBE
- Allow uploads while the device is on battery while under set Battery level (percentage)
- Allowed package family names for non-admin user install
- Audit client does not support signing