Let’s check details of New Group Policy Settings included in Windows 10. Microsoft releases Windows 10 versions twice a year, around March and September. With release new group policy settings added in each version of Windows 10. In this post, you will get details of introduces Windows 10 new Group Policy settings details of the device and user configurations available in Administrative Templates.
Get Details of Intune Administrative Template – List of Intune Administrative Template Settings| User | Device
In this post, I will share the details of the new Windows 10 group policy settings details available for each version of Windows 10. One of the example – Administrative Templates (.admx) for Windows 10 May 2020 Update (2004).
New Group Policy Settings
Lets review what’s new added Group Polices that ship in each version of Windows 10.
Windows 10, version 20H2
The following New Group Policy settings were added in Windows 10, version 20H2.
| Setting Type | Policy Path | Policy Setting Name |
| Machine | Windows Components\Cloud Content | Turn off cloud optimized content |
| User | Windows Components\Multitasking | Configure the inclusion of Edge tabs into Alt-Tab |
| Machine | Windows Components\Data Collection and Preview Builds | Allow Update Compliance Processing |
| Machine | Windows Components\Data Collection and Preview Builds | Allow Desktop Analytics Processing |
| Machine | Windows Components\Data Collection and Preview Builds | Allow WUfB Cloud Processing |
| Machine | Security Options | Domain controller: Allow vulnerable Netlogon secure channel connections |
Windows 10, version 2004
The following New Group Policy settings were added in Windows 10, version 2004.
| Setting Type | Policy Path | Policy Setting Name |
| Machine | Security Settings\Account Policies\Password Policy | Minimum password length audit |
| Machine | Security Settings\Account Policies\Password Policy | Relax minimum password length limits |
| Machine | Security Settings\Local Policies\Security Options | Domain controller: LDAP server channel binding token requirements |
| Machine | System\Logon | Turn on security key sign-in |
| Machine | Windows Components\App Package Deployment | Prevent non-admin users from installing packaged Windows apps |
| Machine | Windows Components\App Privacy | Let Windows apps access user movements while running in the background |
| Machine | Windows Components\Delivery Optimization | Cache Server Hostname Source |
| Machine | Windows Components\Delivery Optimization | Maximum Background Download Bandwidth (in KB/s) |
| Machine | Windows Components\Delivery Optimization | Maximum Foreground Download Bandwidth (in KB/s) |
| Machine | Windows Components\Internet Explorer | Configure which channel of Microsoft Edge to use for opening redirected sites |
| Machine | Windows Components\Microsoft Defender Antivirus\MpEngine | Enable file hash computation feature |
| Machine | Windows Components\Windows Update\Windows Update for Business | Select the target Feature Update version |
| User | Windows Components\Calculator | Allow Graphing Calculator |
| User | Windows Components\IME | Configure Japanese IME version |
| User | Windows Components\IME | Configure Simplified Chinese IME version |
| User | Windows Components\IME | Configure Traditional Chinese IME version |
| User | Windows Components\Internet Explorer | Configure which channel of Microsoft Edge to use for opening redirected sites |
Windows 10, version 1909
The following New Group Policy settings were added in Windows 10, version 1909.
| Setting Type | Policy path | Policy Setting Name |
| Machine | System\Device Installation\Device Installation Restrictions\ | Allow installation of devices that match any of these device instance IDs |
| Machine | System\Device Installation\Device Installation Restrictions\ | Prevent installation of devices that match any of these device instance IDs |
| Machine | Windows Components\Internet Explorer\ | Keep all intranet sites in Internet Explorer |
| Machine | Windows Components\Microsoft Edge\ | For PDF files that have both landscape and portrait pages, print each in its own orientation. |
| User | Windows Components\Internet Explorer\ | Keep all intranet sites in Internet Explorer |
| User | Windows Components\Microsoft Edge\ | For PDF files that have both landscape and portrait pages, print each in its own orientation. |
Windows 10, version 1903
The following New Group Policy settings were added in Windows 10, version 1903.
| Setting Type | Policy Path | Policy Setting Name |
| Machine | Windows Components\App Privacy | Let Windows apps activate with voice |
| Machine | Windows Components\App Privacy | Let Windows apps activate with voice while the system is locked |
| Machine | Windows Components\Credential User Interface | Prevent the use of security questions for local accounts |
| Machine | Windows Components\Data Collection and Preview Builds | Allow commercial data pipeline |
| Machine | Windows Components\Delivery Optimization | Delay Background download Cache Server fallback (in seconds) |
| Machine | Windows Components\Delivery Optimization | Delay Foreground download Cache Server fallback (in seconds) |
| Machine | System\Logon | Show clear logon background |
| Machine | System\Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool | Troubleshooting: Allow users to access recommended troubleshooting for known problems |
| Machine | System\Service Control Manager Settings\Security Settings | Enable svchost.exe mitigation options |
| Machine | System\Storage Sense | Allow Storage Sense |
| Machine | System\Storage Sense | Configure Storage Sense cadence |
| Machine | System\Storage Sense | Allow Storage Sense Temporary Files cleanup |
| Machine | System\Storage Sense | Configure Storage Sense Recycle Bin cleanup threshold |
| Machine | System\Storage Sense | Configure Storage Storage Downloads cleanup threshold |
| Machine | System\Storage Sense | Configure Storage Sense Cloud Content dehydration threshold |
| Machine | Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment | Use WDDM graphics display driver for Remote Desktop Connections |
| Machine | Windows Components\Windows Defender Antivirus\Security Intelligence Updates | Define security intelligence location for VDI clients. |
| Machine | Windows Components\Windows Update | Specify deadlines for automatic updates and restarts |
| Machine | Windows Components\Windows Logon Options | Configure the mode of automatically signing in and locking last interactive user after a restart or cold boot |
Windows 10, version 1809
The following New Group Policy settings were added in Windows 10, version 1809.
| Setting Type | Policy Path | Policy Setting Name |
| Computer | Network\Windows Connection Manager | Enable Windows to soft-disconnect a computer from a network |
| Computer | Start Menu and Taskbar | Do not keep history of recently opened documents |
| Computer | Start Menu and Taskbar | Force Start to be either full screen size or menu size |
| Computer | Start Menu and Taskbar | Remove All Programs list from the Start menu |
| Computer | Start Menu and Taskbar | Remove frequent programs list from the Start Menu |
| Computer | System\Kernel DMA Protection | Enumeration policy for external devices incompatible with Kernel DMA Protection |
| Computer | System\OS Policies | Allow Clipboard History |
| Computer | System\OS Policies | Allow Clipboard synchronization across devices |
| Computer | Windows Components\Data Collection and Preview Builds | Configure collection of browsing data for Microsoft 365 Analytics |
| Computer | Windows Components\Data Collection and Preview Builds | Configure Microsoft 365 Update Readiness upload endpoint |
| Computer | Windows Components\Data Collection and Preview Builds | Disable deleting diagnostic data |
| Computer | Windows Components\Data Collection and Preview Builds | Disable diagnostic data viewer. |
| Computer | Windows Components\Delivery Optimization | [Reserved for future use] Cache Server Hostname |
| Computer | Windows Components\Microsoft Edge | Allow FullScreen Mode |
| Computer | Windows Components\Microsoft Edge | Allow Microsoft Edge to pre-launch at Windows startup when the system is idle and each time Microsoft Edge is closed |
| Computer | Windows Components\Microsoft Edge | Allow Microsoft Edge to start and load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed |
| Computer | Windows Components\Microsoft Edge | Allow printing |
| Computer | Windows Components\Microsoft Edge | Allow Saving History |
| Computer | Windows Components\Microsoft Edge | Allow Sideloading of extension |
| Computer | Windows Components\Microsoft Edge | Configure Favorites Bar |
| Computer | Windows Components\Microsoft Edge | Configure Home Button |
| Computer | Windows Components\Microsoft Edge | Configure kiosk mode |
| Computer | Windows Components\Microsoft Edge | Configure kiosk reset after idle timeout |
| Computer | Windows Components\Microsoft Edge | Configure Open Microsoft Edge With |
| Computer | Windows Components\Microsoft Edge | Prevent certificate error overrides |
| Computer | Windows Components\Microsoft Edge | Prevent turning off required extensions |
| Computer | Windows Components\Microsoft Edge | Set Home Button URL |
| Computer | Windows Components\Microsoft Edge | Set New Tab page URL |
| Computer | Windows Components\Microsoft Edge | Unlock Home Button |
| Computer | Windows Components\OOBE | Don’t launch privacy settings experience on user logon |
| Computer | Windows Components\Windows Defender Antivirus | Configure detection for potentially unwanted applications |
| Computer | Windows Components\Windows Defender Antivirus\Scan | Configure low CPU priority for scheduled scans |
| Computer | Windows Components\Windows Defender Application Guard | Allow camera and microphone access in Windows Defender Application Guard |
| Computer | Windows Components\Windows Defender Application Guard | Allow users to trust files that open in Windows Defender Application Guard |
| Computer | Windows Components\Windows Defender Application Guard | Allow Windows Defender Application Guard to use Root Certificate Authorities from the user’s device |
| Computer | Windows Components\Windows Defender Application Guard | Configure additional sources for untrusted files in Windows Defender Application Guard. |
| Computer | Windows Components\Windows Hello for Business | Use Windows Hello for Business certificates as smart card certificates |
| Computer | Windows Components\Windows Security\Device security | Disable the Clear TPM button |
| Computer | Windows Components\Windows Security\Device security | Hide the TPM Firmware Update recommendation. |
| Computer | Windows Components\Windows Security\Systray | Hide Windows Security Systray |
| Computer | Windows Components\Windows Update | Display options for update notifications |
| Computer | Windows Components\Windows Update | Remove access to “Pause updates” feature |
| User | Control Panel | Settings Page Visibility |
| User | Start Menu and Taskbar | Remove “Recently added” list from Start Menu |
| User | Windows Components\Data Collection and Preview Builds | Configure collection of browsing data for Microsoft 365 Analytics |
| User | Windows Components\Microsoft Edge | Allow FullScreen Mode |
| User | Windows Components\Microsoft Edge | Allow Microsoft Edge to pre-launch at Windows startup when the system is idle and each time Microsoft Edge is closed |
| User | Windows Components\Microsoft Edge | Allow Microsoft Edge to start and load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed |
| User | Windows Components\Microsoft Edge | Allow printing |
| User | Windows Components\Microsoft Edge | Allow Saving History |
| User | Windows Components\Microsoft Edge | Allow Sideloading of extension |
| User | Windows Components\Microsoft Edge | Configure Favorites Bar |
| User | Windows Components\Microsoft Edge | Configure Home Button |
| User | Windows Components\Microsoft Edge | Configure kiosk mode |
| User | Windows Components\Microsoft Edge | Configure kiosk reset after idle timeout |
| User | Windows Components\Microsoft Edge | Configure Open Microsoft Edge With |
| User | Windows Components\Microsoft Edge | Prevent certificate error overrides |
| User | Windows Components\Microsoft Edge | Prevent turning off required extensions |
| User | Windows Components\Microsoft Edge | Set Home Button URL |
| User | Windows Components\Microsoft Edge | Set New Tab page URL |
| User | Windows Components\Microsoft Edge | Unlock Home Button |
| User | Windows Components\OOBE | Don’t launch privacy settings experience on user logon |
Resources
- New policies for Windows 10
- How to Manage Virtual Desktops in Windows 10
- How to Change Screen Brightness in Windows 10
- How to Set File Explorer to Open This PC instead of Quick Access in Windows 10
- FIX This PC can’t be upgraded to Windows 10 version 2004 or 20H2 Issue | Upgrade on Hold
- How to Disable User Sign-in Animation in Windows 10 | First
- FIX Black or frozen screen in Skype for Business during Screen Share | SfB | Windows 10
- How to Hide or Show Cortana Button on Taskbar in Windows 10
- Install .NET Framework 3.5 in Windows 10 | Quick Easy Way
- How to Unblock App Files in Windows 10
- SCCM Task Sequence Available Deployment Options in Distribution Points Tab | ConfigMgr
- How to Extract Specific Windows Index from Windows 10 Multiple Edition ISO
- How to Configure Collection Size Limits for Task Sequence Deployment Settings | Configuration Manager | SCCM