Windows 10 an Windows Server 2016 Group Policies and Administrative Templates

Based on the original article located here: https://technet.microsoft.com/en-us/itpro/windows/manage/new-policies-for-windows-10

Applies to

  • Windows 10
  • Windows 10 Mobile

Windows 10 includes the following new policies for management, in addition to policies that were available for Windows 8.1 and Windows Phone 8.1. Download the complete set of Administrative Template (.admx) files for Windows 10.

New Group Policy settings in Windows 10

There are some new policy settings in Group Policy for devices running Windows 10 , such as:

  • Microsoft Edge browser settings

  • Universal Windows app settings, such as:

    • Disable deployment of Windows Store apps to non-system volumes

    • Restrict users' application data to always stay on the system volume

    • Allow applications to share app data between users

  • Start screen and Start menu layout

  • Windows Tips

  • Consumer experiences, such as suggested apps in Start and app tiles from Microsoft dynamically inserted in the default Start menu

  • Microsoft Passport

  • Windows Updates for Business

For a spreadsheet of Group Policy settings included in Windows, see Group Policy Settings Reference for Windows and Windows Server.

New MDM policies

Mobile device management (MDM) for Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile includes settings from Windows Phone 8.1, plus new or enhanced settings for Windows 10, such as:

  • Defender (Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education only)

  • Enhanced Bluetooth policies

  • Passport and Hello

  • Device update

  • Hardware-based device health attestation

  • Kiosk mode, start screen, start menu layout

  • Security

  • VPN and enterprise Wi-Fi management

  • Certificate management

  • Windows Tips

  • Consumer experiences, such as suggested apps in Start and app tiles from Microsoft dynamically inserted in the default Start menu

Windows 10, version 1703, adds a number of ADMX-backed policies to MDM.

If you use Microsoft Intune for MDM, you can configure custom policies to deploy Open Mobile Alliance Uniform Resource Identifier (OMA-URI) settings that can be used to control features on Windows 10. For a list of OMA-URI settings, see Custom URI settings for Windows 10 devices.

No new Exchange ActiveSync policies. For more information, see the ActiveSync configuration service provider technical reference.

Manage corporate devices

Changes to Group Policy settings for Start in Windows 10

Windows 10 Mobile and MDM