What’s New Group Policy Settings Available in Different Versions of Windows 10

New Group Policy Settings

Let’s check details of New Group Policy Settings included in Windows 10. Microsoft releases Windows 10 versions twice a year, around March and September. With release new group policy settings added in each version of Windows 10. In this post, you will get details of introduces Windows 10 new Group Policy settings details of the device and user configurations available in Administrative Templates.

Get Details of Intune Administrative Template – List of Intune Administrative Template Settings| User | Device

In this post, I will share the details of the new Windows 10 group policy settings details available for each version of Windows 10. One of the example – Administrative Templates (.admx) for Windows 10 May 2020 Update (2004).

New Group Policy Settings

Lets review what’s new added Group Polices that ship in each version of Windows 10.

Windows 10, version 20H2

The following New Group Policy settings were added in Windows 10, version 20H2.

Setting Type Policy Path Policy Setting Name
MachineWindows Components\Cloud ContentTurn off cloud optimized content
UserWindows Components\MultitaskingConfigure the inclusion of Edge tabs into Alt-Tab
MachineWindows Components\Data Collection and Preview BuildsAllow Update Compliance Processing
MachineWindows Components\Data Collection and Preview BuildsAllow Desktop Analytics Processing
MachineWindows Components\Data Collection and Preview BuildsAllow WUfB Cloud Processing
MachineSecurity OptionsDomain controller: Allow vulnerable Netlogon secure channel connections
 New Group Policy Settings in Windows 10
What's New Group Policy Settings Available in Different Versions of Windows 10 New Group Policy Settings
What’s New Group Policy Settings Available in Different Versions of Windows 10

Windows 10, version 2004

The following New Group Policy settings were added in Windows 10, version 2004.

Setting Type Policy Path Policy Setting Name
MachineSecurity Settings\Account Policies\Password PolicyMinimum password length audit
MachineSecurity Settings\Account Policies\Password PolicyRelax minimum password length limits
MachineSecurity Settings\Local Policies\Security OptionsDomain controller: LDAP server channel binding token requirements
MachineSystem\LogonTurn on security key sign-in
MachineWindows Components\App Package DeploymentPrevent non-admin users from installing packaged Windows apps
MachineWindows Components\App PrivacyLet Windows apps access user movements while running in the background
MachineWindows Components\Delivery OptimizationCache Server Hostname Source
MachineWindows Components\Delivery OptimizationMaximum Background Download Bandwidth (in KB/s)
MachineWindows Components\Delivery OptimizationMaximum Foreground Download Bandwidth (in KB/s)
MachineWindows Components\Internet ExplorerConfigure which channel of Microsoft Edge to use for opening redirected sites
MachineWindows Components\Microsoft Defender Antivirus\MpEngineEnable file hash computation feature
MachineWindows Components\Windows Update\Windows Update for BusinessSelect the target Feature Update version
UserWindows Components\CalculatorAllow Graphing Calculator
UserWindows Components\IMEConfigure Japanese IME version
UserWindows Components\IMEConfigure Simplified Chinese IME version
UserWindows Components\IMEConfigure Traditional Chinese IME version
UserWindows Components\Internet ExplorerConfigure which channel of Microsoft Edge to use for opening redirected sites
New Group Policy Settings in Windows 10 

Windows 10, version 1909

The following New Group Policy settings were added in Windows 10, version 1909.

Setting Type Policy path Policy Setting Name
MachineSystem\Device Installation\Device Installation Restrictions\Allow installation of devices that match any of these device instance IDs
MachineSystem\Device Installation\Device Installation Restrictions\Prevent installation of devices that match any of these device instance IDs
MachineWindows Components\Internet Explorer\Keep all intranet sites in Internet Explorer
MachineWindows Components\Microsoft Edge\For PDF files that have both landscape and portrait pages, print each in its own orientation.
UserWindows Components\Internet Explorer\Keep all intranet sites in Internet Explorer
UserWindows Components\Microsoft Edge\For PDF files that have both landscape and portrait pages, print each in its own orientation.
New Group Policy Settings in Windows 10 – What’s New Group Policy Settings Available in Different Versions of Windows 10

Windows 10, version 1903

The following New Group Policy settings were added in Windows 10, version 1903.

Setting Type Policy Path Policy Setting Name
MachineWindows Components\App PrivacyLet Windows apps activate with voice
MachineWindows Components\App PrivacyLet Windows apps activate with voice while the system is locked
MachineWindows Components\Credential User InterfacePrevent the use of security questions for local accounts
MachineWindows Components\Data Collection and Preview BuildsAllow commercial data pipeline
MachineWindows Components\Delivery OptimizationDelay Background download Cache Server fallback (in seconds)
MachineWindows Components\Delivery OptimizationDelay Foreground download Cache Server fallback (in seconds)
MachineSystem\LogonShow clear logon background
MachineSystem\Troubleshooting and Diagnostics\Microsoft Support Diagnostic ToolTroubleshooting: Allow users to access recommended troubleshooting for known problems
MachineSystem\Service Control Manager Settings\Security SettingsEnable svchost.exe mitigation options
MachineSystem\Storage SenseAllow Storage Sense
MachineSystem\Storage SenseConfigure Storage Sense cadence
MachineSystem\Storage SenseAllow Storage Sense Temporary Files cleanup
MachineSystem\Storage SenseConfigure Storage Sense Recycle Bin cleanup threshold
MachineSystem\Storage SenseConfigure Storage Storage Downloads cleanup threshold
MachineSystem\Storage SenseConfigure Storage Sense Cloud Content dehydration threshold
MachineWindows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session EnvironmentUse WDDM graphics display driver for Remote Desktop Connections
MachineWindows Components\Windows Defender Antivirus\Security Intelligence UpdatesDefine security intelligence location for VDI clients.
MachineWindows Components\Windows UpdateSpecify deadlines for automatic updates and restarts
MachineWindows Components\Windows Logon OptionsConfigure the mode of automatically signing in and locking last interactive user after a restart or cold boot
New Group Policy Settings in Windows 10 
What's New Group Policy Settings Available in Different Versions of Windows 10
What’s New Group Policy Settings Available in Different Versions of Windows 10

Windows 10, version 1809

The following New Group Policy settings were added in Windows 10, version 1809.

Setting Type Policy Path Policy Setting Name
ComputerNetwork\Windows Connection ManagerEnable Windows to soft-disconnect a computer from a network
ComputerStart Menu and TaskbarDo not keep history of recently opened documents
ComputerStart Menu and TaskbarForce Start to be either full screen size or menu size
ComputerStart Menu and TaskbarRemove All Programs list from the Start menu
ComputerStart Menu and TaskbarRemove frequent programs list from the Start Menu
ComputerSystem\Kernel DMA ProtectionEnumeration policy for external devices incompatible with Kernel DMA Protection
ComputerSystem\OS PoliciesAllow Clipboard History
ComputerSystem\OS PoliciesAllow Clipboard synchronization across devices
ComputerWindows Components\Data Collection and Preview BuildsConfigure collection of browsing data for Microsoft 365 Analytics
ComputerWindows Components\Data Collection and Preview BuildsConfigure Microsoft 365 Update Readiness upload endpoint
ComputerWindows Components\Data Collection and Preview BuildsDisable deleting diagnostic data 
ComputerWindows Components\Data Collection and Preview BuildsDisable diagnostic data viewer. 
ComputerWindows Components\Delivery Optimization[Reserved for future use] Cache Server Hostname
ComputerWindows Components\Microsoft EdgeAllow FullScreen Mode
ComputerWindows Components\Microsoft EdgeAllow Microsoft Edge to pre-launch at Windows startup when the system is idle and each time Microsoft Edge is closed
ComputerWindows Components\Microsoft EdgeAllow Microsoft Edge to start and load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed
ComputerWindows Components\Microsoft EdgeAllow printing
ComputerWindows Components\Microsoft EdgeAllow Saving History
ComputerWindows Components\Microsoft EdgeAllow Sideloading of extension
ComputerWindows Components\Microsoft EdgeConfigure Favorites Bar
ComputerWindows Components\Microsoft EdgeConfigure Home Button
ComputerWindows Components\Microsoft EdgeConfigure kiosk mode
ComputerWindows Components\Microsoft EdgeConfigure kiosk reset after idle timeout
ComputerWindows Components\Microsoft EdgeConfigure Open Microsoft Edge With
ComputerWindows Components\Microsoft EdgePrevent certificate error overrides
ComputerWindows Components\Microsoft EdgePrevent turning off required extensions
ComputerWindows Components\Microsoft EdgeSet Home Button URL
ComputerWindows Components\Microsoft EdgeSet New Tab page URL
ComputerWindows Components\Microsoft EdgeUnlock Home Button
ComputerWindows Components\OOBEDon’t launch privacy settings experience on user logon
ComputerWindows Components\Windows Defender AntivirusConfigure detection for potentially unwanted applications
ComputerWindows Components\Windows Defender Antivirus\ScanConfigure low CPU priority for scheduled scans
ComputerWindows Components\Windows Defender Application GuardAllow camera and microphone access in Windows Defender Application Guard
ComputerWindows Components\Windows Defender Application GuardAllow users to trust files that open in Windows Defender Application Guard
ComputerWindows Components\Windows Defender Application GuardAllow Windows Defender Application Guard to use Root Certificate Authorities from the user’s device
ComputerWindows Components\Windows Defender Application GuardConfigure additional sources for untrusted files in Windows Defender Application Guard.
ComputerWindows Components\Windows Hello for BusinessUse Windows Hello for Business certificates as smart card certificates
ComputerWindows Components\Windows Security\Device securityDisable the Clear TPM button
ComputerWindows Components\Windows Security\Device securityHide the TPM Firmware Update recommendation.
ComputerWindows Components\Windows Security\SystrayHide Windows Security Systray
ComputerWindows Components\Windows UpdateDisplay options for update notifications
ComputerWindows Components\Windows UpdateRemove access to “Pause updates” feature
UserControl PanelSettings Page Visibility
UserStart Menu and TaskbarRemove “Recently added” list from Start Menu
UserWindows Components\Data Collection and Preview BuildsConfigure collection of browsing data for Microsoft 365 Analytics
UserWindows Components\Microsoft EdgeAllow FullScreen Mode
UserWindows Components\Microsoft EdgeAllow Microsoft Edge to pre-launch at Windows startup when the system is idle and each time Microsoft Edge is closed
UserWindows Components\Microsoft EdgeAllow Microsoft Edge to start and load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed
UserWindows Components\Microsoft EdgeAllow printing
UserWindows Components\Microsoft EdgeAllow Saving History
UserWindows Components\Microsoft EdgeAllow Sideloading of extension
UserWindows Components\Microsoft EdgeConfigure Favorites Bar
UserWindows Components\Microsoft EdgeConfigure Home Button
UserWindows Components\Microsoft EdgeConfigure kiosk mode
UserWindows Components\Microsoft EdgeConfigure kiosk reset after idle timeout
UserWindows Components\Microsoft EdgeConfigure Open Microsoft Edge With
UserWindows Components\Microsoft EdgePrevent certificate error overrides
UserWindows Components\Microsoft EdgePrevent turning off required extensions
UserWindows Components\Microsoft EdgeSet Home Button URL
UserWindows Components\Microsoft EdgeSet New Tab page URL
UserWindows Components\Microsoft EdgeUnlock Home Button
UserWindows Components\OOBEDon’t launch privacy settings experience on user logon
 New Group Policy Settings in Windows 10 – What’s New Group Policy Settings Available in Different Versions of Windows 10

Resources

Leave a Comment

Your email address will not be published. Required fields are marked *