List Of Windows 10 21H2 Group Policy Settings HTMD Blog (2024)

December 21, 2021 by Jitesh Kumar

Let’s quickly check the details oftheNew Windows 10 21H2 Group Policy Settings.In November, Microsoft releasedWindows 10, version 21H2feature update, akaWindows 10 November 2021 Update.

With every new release of Windows 10, Windows 11 group policy settings are updated to enhance the work experience. This update also contains all features and fixes in previous cumulative updates.

Windows 10 21H2 group policy added exiting settings for managing windows updates. The Windows 10 21h2 group policy Specify source service for specific classes of Windows Updates now allows you to obtain different types of updates (quality, feature update, driver, or other) from Windows Server Update Service or Windows Update, respectively.

Windows 10 21H2 Group Policy Settings

Windows 10 21H2 Group Policy Settings for Computer (Machine) and User configurations are included in the Administrative template for Windows 10 version 21H2 (November 2021 Update). Here’s a list of shipped Windows 10 21h2 group policy –

Location	Policy Path	Policy Setting Name	Help Text
Machine	MS Security Guide	Limits print driver installation to Administrators	Determines whether users that aren’t Administrator can install print drivers on this computer. By default users that aren’t Administrators can’t install print drivers on this computer.
Machine	Printers	Enable Device Control Printing Restrictions	Determines whether Device Control Printing Restrictions are enforced for printing on this computer. By default there are no restrictions to printing based on connection type or printer Make/Model.
Machine	Printers	Limits print driver installation to Administrators	Determines whether users that aren’t Administrators can install print drivers on this computer. By default users that aren’t Administrators can’t install print drivers on this computer.
Machine	Printers	List of Approved USB-connected print devices	This setting is a component of the Device Control Printing Restrictions.
Machine	System\Device Installation\Device Installation Restrictions	Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria	This policy setting will change the evaluation order in which Allow and Prevent policy settings are applied when more than one install policy setting is applicable for a given device.
Machine	System\Kerberos	Allow retrieving the cloud kerberos ticket during the logon	This policy setting allows retrieving the cloud kerberos ticket during the logon.If you disable or do not configure this policy setting the cloud kerberos ticket is not retrieved during the logon.
Machine	Windows Components\Data Collection and Preview Builds	Disable OneSettings Downloads	This policy setting controls whether Windows attempts to connect with the OneSettings service.
Machine	Windows Components\Data Collection and Preview Builds	Enable OneSettings Auditing	This policy setting controls whether Windows records attempts to connect with the OneSettings service to the EventLog.
Machine	Windows Components\Internet Explorer	Reset zoom to default for HTML dialogs in Internet Explorer mode	This policy setting lets admins reset zoom to default for HTML dialogs in Internet Explorer mode.
Machine	Windows Components\Microsoft Defender Antivirus\Device Control	Define device control policy groups	You need to follow the device control policy groups xml schema to fill out the policy groups data.
Machine	Windows Components\Microsoft Defender Antivirus\Device Control	Define device control policy rules	Follow the device control policy rules xml schema to fill out the policy rules data.
Machine	Windows Components\News and interests	Enable news and interests on the taskbar	This policy setting specifies whether news and interests is allowed on the device.
Machine	Windows Components\Windows Hello for Business	Use cloud trust for on-premises authentication	Use this policy setting to configure Windows Hello for Business to use Azure AD Kerberos for on-premises authentication. This Windows 10 21H2 group policy supported for Windows 10 version 21H2 and later.
Machine	Windows Components\Windows Update	Specify source service for specific classes of Windows Updates	When this policy is enabled devices will receive Windows updates for the classes listed from the specified update source: either Windows Update or Windows Server Update Service.
User	Control Panel\Printers	Enable Device Control Printing Restrictions	Determines whether Device Control Printing Restrictions are enforced for printing on this computer
User	Control Panel\Printers	List of Approved USB-connected print devices	This setting is a component of the Device Control Printing Restrictions. To use this setting enable Device Control Printing by enabling the “Enable Device Control Printing Restrictions” setting.
User	Windows Components\Internet Explorer	Reset zoom to default for HTML dialogs in Internet Explorer mode	This policy setting lets admins reset zoom to default for HTML dialogs in Internet Explorer mode.

Author

About Author->Jiteshhas over 5 years of working experience in the IT Industry. He writes and shares his experiences related to Microsoft device management technologies and IT Infrastructure management. His primary focus area is Windows 10 Deployment solution with Configuration Manager, Microsoft Deployment Toolkit (MDT), and Microsoft Intune.

3 thoughts on “List of Windows 10 21H2 Group Policy Settings”

Hi, just fyi that I noticed the Printing2.admx was updated (2021 date), however printing2.adml still has a 2019 date on it so looks like maybe not updated, so if you see anything strange when viewing those settings, this may be why.
Reply
There’s a V2 set of these policies which contain addition settings: https://www.microsoft.com/en-us/download/details.aspx?id=104042
Reply
until now we had this setting active in order to prevent downloading other than on wsus: “DotNotConnectToWindowsUpdateInternetLocation” = true
So If i want to use “Specify source service for specific classes of Windows Updates” i need to disable “DotNotConnectToWindowsUpdateInternetLocation” ?
Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

FAQs

List Of Windows 10 21H2 Group Policy Settings HTMD Blog? ›

To enable Microsoft Updates, use the Group Policy Management Console go to Computer Configuration > Administrative Templates > Windows Components > Windows Update > Configure Automatic Updates and select Install updates for other Microsoft products.

Explore More ›

How do I check for Windows 10 updates in Group Policy? ›

Know More ›

How do I find group policy in Windows 10? ›

Open the Control Panel on the Start Menu. Click the Windows icon on the Toolbar, and then click the widget icon for Settings. Start typing 'group policy' or 'gpedit' and click the 'Edit Group Policy' option.

Get More Info Here ›

How many new group policy objects are available with Windows 11 21h2? ›

New group policies in Windows 11 2022: Start menu, taskbar, winget, printing, Defender, and IE. The current release of Windows 11 includes over 70 new settings for group policies. Most of these serve as security improvements and have largely been included in the security baseline.

Know More ›

How to set Windows 10 version in GPO? ›

Open Group Policy Editor.

Double-click on Select the target Feature Update version. Click Enabled. Under Target Version for Feature Updates, enter the build of Windows 10 you'd like to upgrade to next. For example - 1903, 1909, 2004.

Read The Full Story ›

How do I see all Group Policy applied on my computer? ›

2 answers

Log on machine using Administrator.
Open CMD (run as administrator).
Type gpresult /r or gpresult /h C:\gpo. html and click Enter.
Check which Group policy is applied to this machine by opening C:\gpo. html and checking "Computer Details".

Oct 14, 2022

Where is the Windows Update Group Policy registry? ›

In the Group Policy Management Editor, Windows Update policies for computer-based configuration are located in the path PolicyName > Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update.

How do I search for Group Policy Settings in Windows? ›

Open the Group Policy Editor Using the Windows Search Function

Click the Start button (Windows logo) or the search bar or icon from the taskbar.
Type gpedit or gpedit. msc to search for the Edit Group Policy app.
Click the Edit Group Policy app.

Sep 27, 2022

Get More Info ›

Is there a way to search Group Policy? ›

To search for Group Policy settings in the Group Policy Management Console (GPMC), use the Group Policy Search tool. To find the Group Policy settings, click Windows Components, and then click Internet Explorer.

Learn More Now ›

How do I access Group Policy Management Console in Windows 10? ›

It can also be opened using one of the following steps.

Go to Start, the Run. Type gpmc. msc and click OK.
Go to Start, type gpmc. msc in the search bar, then hit Enter.
Go to Start, then Administrative Tools, then Group Policy Management.

Nov 21, 2023