Group Policy Reference
A comprehensive Microsoft Windows Group Policy reference — searchable database of GPO settings with registry paths, supported OS versions, configuration steps, security implications, and real-world use cases. Built for sysadmins managing Active Directory, Intune, and standalone Windows.
What is a Group Policy?
A Group Policy Object (GPO) is a configuration setting in Windows that defines how computers and user accounts behave. Each policy maps to one or more registry values, applies to a specific scope (Computer or User), and is bundled in an ADMX (Administrative Template) file. This reference indexes Microsoft's ADMX catalog with detailed explanations, registry mappings, and operational guidance you won't find on the official Microsoft Learn pages.
Configure default font
Sets system-wide default font for consistency. Ensures readability and accessibility standards are met.
Computer Configuration > Policies > Administrative Templates > Windows Components > Display
Supported on Windows 10, Windows 11, Windows Server 2016 and later
Read reference →Show hidden files enforcement
Enforces display of hidden files system-wide. Enables visibility of system files for troubleshooting in MSP support scenarios.
User Configuration > Policies > Administrative Templates > Windows Components > File Explorer
Supported on Windows 10, Windows 11, Windows Server 2016 and later
Read reference →Disable screen saver settings changes
Locks screen saver settings to prevent user modification. Enforces security timeout and screen saver policies.
User Configuration > Policies > Administrative Templates > Control Panel > Display
Supported on Windows 10, Windows 11, Windows Server 2016 and later
Read reference →Configure Start menu layout
Deploys custom Start menu layout to all users. Simplifies access to required applications and reduces support calls.
User Configuration > Policies > Administrative Templates > Start Menu and Taskbar
Supported on Windows 10, Windows 11, Windows Server 2016 and later
Read reference →Prevent access to Settings app
Blocks access to Windows Settings application. Prevents users from modifying device configuration in restricted environments.
User Configuration > Policies > Administrative Templates > System > Group Policy
Supported on Windows 10, Windows 11, Windows Server 2016 and later
Read reference →Disable context menu customization
Prevents users from accessing right-click context menu in File Explorer. Restricts access to sensitive options.
User Configuration > Policies > Administrative Templates > Windows Components > File Explorer
Supported on Windows 10, Windows 11, Windows Server 2016 and later
Read reference →Pin applications to taskbar
Pre-pins required applications to taskbar. Ensures critical business applications are always accessible to users.
User Configuration > Policies > Administrative Templates > Start Menu and Taskbar
Supported on Windows 10, Windows 11, Windows Server 2016 and later
Read reference →Prevent access to drives via My Computer
Prevents opening specified drives in Windows Explorer. Enforces data compartmentalization in secure environments.
User Configuration > Policies > Administrative Templates > Windows Components > File Explorer
Supported on Windows 10, Windows 11, Windows Server 2016 and later
Read reference →Remove notification area items
Hides specified system tray icons from notification area. Reduces visual clutter and prevents user access to disabled features.
User Configuration > Policies > Administrative Templates > Start Menu and Taskbar > Notification Area
Supported on Windows 10, Windows 11, Windows Server 2016 and later
Read reference →Hide Control Panel
Hides Control Panel from Start menu and File Explorer. Restricts user access to system settings in locked-down environments.
User Configuration > Policies > Administrative Templates > Control Panel
Supported on Windows 10, Windows 11, Windows Server 2016 and later
Read reference →Disable file search indexing in File Explorer
Disables indexing of encrypted files and protected stores. Protects sensitive data privacy in File Explorer searches.
Computer Configuration > Policies > Administrative Templates > Windows Components > Search
Supported on Windows 10, Windows 11, Windows Server 2016 and later
Read reference →Prevent adding files to Quick Access
Disables Quick Access feature in File Explorer. Ensures consistent folder navigation and prevents shortcut proliferation.
User Configuration > Policies > Administrative Templates > Windows Components > File Explorer
Supported on Windows 10, Windows 11, Windows Server 2016 and later
Read reference →Disable thumbnail caching
Disables thumbnail cache files creation. Protects privacy and reduces disk usage by preventing thumbnail generation.
Computer Configuration > Policies > Administrative Templates > System > Disk Quotas
Supported on Windows 10, Windows 11, Windows Server 2016 and later
Read reference →Disable Previous Versions tab
Hides Previous Versions tab in file properties. Prevents users from accessing old versions of files for security.
Computer Configuration > Policies > Administrative Templates > System > File Replication Service
Supported on Windows 10, Windows 11, Windows Server 2016 and later
Read reference →Show file extension display enforcement
Forces display of file extensions for all files. Prevents users from being tricked by malicious executable files.
User Configuration > Policies > Administrative Templates > Windows Components > File Explorer
Supported on Windows 10, Windows 11, Windows Server 2016 and later
Read reference →Hide library folders
Hides library folders from File Explorer navigation. Simplifies interface and restricts access to consolidated folder locations.
User Configuration > Policies > Administrative Templates > Windows Components > File Explorer
Supported on Windows 10, Windows 11, Windows Server 2016 and later
Read reference →Hide folder merge conflicts in File Explorer
Manages folder merge dialog appearance during copy/move operations. Enabled by default for standard behavior.
User Configuration > Policies > Administrative Templates > Windows Components > File Explorer
Supported on Windows 10, Windows 11, Windows Server 2016 and later
Read reference →Disable shortcut resolution for network paths
Prevents automatic resolution of broken shortcuts to network paths. Improves security by blocking silent reconnection attempts.
Computer Configuration > Policies > Administrative Templates > System > Control Panel
Supported on Windows 10, Windows 11, Windows Server 2016 and later
Read reference →Restrict File Explorer network browsing
Hides Network Connections folder from File Explorer. Prevents users from accessing network configuration interfaces.
User Configuration > Policies > Administrative Templates > Windows Components > File Explorer
Supported on Windows 10, Windows 11, Windows Server 2016 and later
Read reference →