Rd Client Windows 10

After you enable this setting on a Windows Server 2003-based computer, the following is true: The RDP channel is encrypted by using the 3DES algorithm in Cipher Block Chaining (CBC) mode with a 168-bit key length. The SHA-1 algorithm is used to create message digests. Clients must use the RDP 5.2 client program or a later version to connect. Chrome Remote Desktop. Access my computer. Share my screen. The easy way to remotely connect with your home or work computer, or share your screen with others. Securely access your computer whenever you're away, using your phone, tablet, or another computer.

-->

Applies to

Windows 10

As of September 2020 This page will no longer be updated. To find the Group Polices that ship in each version of Windows, refer to the Group Policy Settings Reference Spreadsheet. You can always locate the most recent version of the Spreadsheet by searching the Internet for 'Windows Version + Group Policy Settings Reference'.

For example, searching for 'Windows 2004' + 'Group Policy Settings Reference Spreadsheet' in a web browser will return to you the link to download the Group Policy Settings Reference Spreadsheet for Windows 2004.

The latest group policy reference for Windows 10 version 2004 is available here.

New Group Policy settings in Windows 10, version 1903

The following Group Policy settings were added in Windows 10, version 1903:

System

SystemService Control Manager SettingsSecurity SettingsEnable svchost.exe mitigation options
SystemStorage SenseAllow Storage Sense
SystemStorage SenseAllow Storage Sense Temporary Files cleanup
SystemStorage SenseConfigure Storage Sense
SystemStorage SenseConfigure Storage Sense Cloud content dehydration threshold
SystemStorage SenseConfigure Storage Sense Recycle Bin cleanup threshold
SystemStorage SenseConfigure Storage Sense Downloads cleanup threshold
SystemTroubleshooting and DiagnosticsMicrosoft Support Diagnostic ToolTroubleshooting:Allow users to access recommended troubleshooting for known problems

Windows Components

Windows ComponentsApp PrivacyLet Windows apps activate with voice
Windows ComponentsApp PrivacyLet Windows apps activate with voice while the system is locked
Windows ComponentsData Collection and Preview BuildsAllow commercial data pipeline
Windows ComponentsData Collection and Preview BuildsConfigure collection of browsing data for Desktop Analytics
Windows ComponentsData Collection and Preview BuildsConfigure diagnostic data upload endpoint for Desktop Analytics
Windows ComponentsDelivery OptimizationDelay background download Cache Server fallback (in seconds)
Windows ComponentsDelivery OptimizationDelay Foreground download Cache Server fallback (in seconds)
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostRemote Session EnvironmentUse WDDM graphics display driver for Remote Desktop Connections
Windows ComponentsWindows Logon OptionsConfigure the mode of automatically signing in and locking last interactive user after a restart or cold boot

New Group Policy settings in Windows 10, version 1809

The following Group Policy settings were added in Windows 10, version 1809:

Start Menu and Taskbar

Start Menu and TaskbarForce Start to be either full screen size or menu size
Start Menu and TaskbarRemove 'Recently added' list from Start Menu
Start Menu and TaskbarRemove All Programs list from the Start menu
Start Menu and TaskbarRemove frequent programs list from the Start Menu

System

SystemGroup PolicyAllow asynchronous user Group Policy processing when logging on through Remote Desktop Services
SystemGroup PolicyConfigure Applications preference extension policy processing
SystemGroup PolicyConfigure Data Sources preference extension policy processing
SystemGroup PolicyConfigure Devices preference extension policy processing
SystemGroup PolicyConfigure Drive Maps preference extension policy processing
SystemGroup PolicyConfigure Environment preference extension policy processing
SystemGroup PolicyConfigure Files preference extension policy processing
SystemGroup PolicyConfigure Folder Options preference extension policy processing
SystemGroup PolicyConfigure Folders preference extension policy processing
SystemGroup PolicyConfigure Ini Files preference extension policy processing
SystemGroup PolicyConfigure Internet Settings preference extension policy processing
SystemGroup PolicyConfigure Local Users and Groups preference extension policy processing
SystemGroup PolicyConfigure Network Options preference extension policy processing
SystemGroup PolicyConfigure Network Shares preference extension policy processing
SystemGroup PolicyConfigure Power Options preference extension policy processing
SystemGroup PolicyConfigure Printers preference extension policy processing
SystemGroup PolicyConfigure Regional Options preference extension policy processing
SystemGroup PolicyConfigure Registry preference extension policy processing
SystemGroup PolicyConfigure Scheduled Tasks preference extension policy processing
SystemGroup PolicyConfigure Services preference extension policy processing
SystemGroup PolicyConfigure Shortcuts preference extension policy processing
SystemGroup PolicyConfigure Start Menu preference extension policy processing
SystemGroup PolicyLogging and tracingConfigure Applications preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure Data Sources preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure Devices preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure Drive Maps preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure Environment preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure Files preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure Folder Options preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure Folders preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure INI Files preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure Internet Settings preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure Local Users and Groups preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure Network Options preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure Network Shares preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure Power Options preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure Printers preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure Regional Options preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure Registry preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure Scheduled Tasks preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure Services preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure Shortcuts preference logging and tracing
SystemGroup PolicyLogging and tracingConfigure Start Menu preference logging and tracing
SystemKernel DMA ProtectionEnumeration policy for external devices incompatible with Kernel DMA Protection
SystemOS PoliciesAllow Clipboard History
SystemOS PoliciesAllow Clipboard synchronization across devices

Windows Components

Windows ComponentsData Collection and Preview BuildsConfigure Microsoft 365 Update Readiness upload endpoint
Windows ComponentsData Collection and Preview BuildsDisable deleting diagnostic data
Windows ComponentsData Collection and Preview BuildsDisable diagnostic data viewer
Windows ComponentsDelivery Optimization[Reserved for future use] Cache Server Hostname
Windows ComponentsLocation and SensorsWindows Location ProviderTurn off Windows Location Provider
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insDFS Management
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insFile Server Resource Manager
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insShare and Storage Management
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insStorage Manager for SANs
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insExtension snap-insDFS Management Extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insExtension snap-insDisk Management Extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insExtension snap-insFile Server Resource Manager Extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insExtension snap-insShare and Storage Management Extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insExtension snap-insStorage Manager for SANS Extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyGroup Policy Management Editor
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyGroup Policy Starter GPO Editor
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Application snap-ins
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Applications preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Control Panel Settings (Computers)
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Control Panel Settings (Users)
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Data Sources preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Devices preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Drive Maps preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Environment preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Files preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Folder Options preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Folders preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Ini Files preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Internet Settings preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Local Users and Groups preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Network Options preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Network Shares preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Power Options preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Preferences tab
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Printers preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Regional Options preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Registry preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Scheduled Tasks preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Services preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Shortcuts preference extension
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-insGroup PolicyPreference snap-in extensionsPermit use of Start Menu preference extension
Windows ComponentsOOBEDon't launch privacy settings experience on user logon
Windows ComponentsOOBEDon't launch privacy settings experience on user logon
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostApplication CompatibilityDo not use Remote Desktop Session Host server IP address when virtual IP address is not available
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostApplication CompatibilitySelect the network adapter to be used for Remote Desktop IP Virtualization
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostApplication CompatibilityTurn off Windows Installer RDS Compatibility
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostApplication CompatibilityTurn on Remote Desktop IP Virtualization
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostConnectionsAllow remote start of unlisted programs
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostConnectionsTurn off Fair Share CPU Scheduling
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostDevice and Resource RedirectionAllow time zone redirection
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostDevice and Resource RedirectionDo not allow Clipboard redirection
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostPrinter RedirectionRedirect only the default client printer
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostPrinter RedirectionRedirect only the default client printer
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostRD Connection BrokerUse RD Connection Broker load balancing
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostRemote Session EnvironmentAllow desktop composition for remote desktop sessions
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostRemote Session EnvironmentAlways show desktop on connection
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostRemote Session EnvironmentDo not allow font smoothing
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostRemote Session EnvironmentRemove remote desktop wallpaper
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostSession Time LimitsSet time limit for logoff of RemoteApp sessions
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostSession Time LimitsSet time limit for logoff of RemoteApp sessions
Windows ComponentsMicrosoft Defender AntivirusConfigure detection for potentially unwanted applications
Windows ComponentsMicrosoft Defender AntivirusScanConfigure low CPU priority for scheduled scans
Windows ComponentsWindows Defender Application GuardAllow camera and microphone access in Windows Defender Application Guard
Windows ComponentsWindows Defender Application GuardAllow users to trust files that open in Windows Defender Application Guard
Windows ComponentsWindows Defender Application GuardAllow Windows Defender Application Guard to use Root Certificate Authorities from the user’s device
Windows ComponentsWindows Defender Application GuardConfigure additional sources for untrusted files in Windows Defender Application Guard
Windows ComponentsWindows Hello for BusinessUse Windows Hello for Business certificates as smart card certificates
Windows ComponentsWindows Media PlayerDo Not Show First Use Dialog Boxes
Windows ComponentsWindows Media PlayerPrevent Automatic Updates
Windows ComponentsWindows Media PlayerPrevent CD and DVD Media Information Retrieval
Windows ComponentsWindows Media PlayerPrevent Desktop Shortcut Creation
Windows ComponentsWindows Media PlayerPrevent Media Sharing
Windows ComponentsWindows Media PlayerPrevent Music File Media Information Retrieval
Windows ComponentsWindows Media PlayerPrevent Quick Launch Toolbar Shortcut Creation
Windows ComponentsWindows Media PlayerPrevent Radio Station Preset Retrieval
Windows ComponentsWindows Media PlayerPrevent Video Smoothing
Windows ComponentsWindows Media PlayerNetworkingConfigure HTTP Proxy
Windows ComponentsWindows Media PlayerNetworkingConfigure MMS Proxy
Windows ComponentsWindows Media PlayerNetworkingConfigure Network Buffering
Windows ComponentsWindows Media PlayerNetworkingConfigure RTSP Proxy
Windows ComponentsWindows Media PlayerNetworkingHide Network Tab
Windows ComponentsWindows Media PlayerNetworkingStreaming Media Protocols
Windows ComponentsWindows Media PlayerPlaybackAllow Screen Saver
Windows ComponentsWindows Media PlayerPlaybackPrevent Codec Download
Windows ComponentsWindows Media PlayerUser InterfaceDo Not Show Anchor
Windows ComponentsWindows Media PlayerUser InterfaceHide Privacy Tab
Windows ComponentsWindows Media PlayerUser InterfaceHide Security Tab
Windows ComponentsWindows Media PlayerUser InterfaceSet and Lock Skin
Windows ComponentsWindows SecurityAccount protectionHide the Account protection area
Windows ComponentsWindows SecurityApp and browser protectionHide the App and browser protection area
Windows ComponentsWindows SecurityApp and browser protectionPrevent users from modifying settings
Windows ComponentsWindows SecurityDevice performance and healthHide the Device performance and health area
Windows ComponentsWindows SecurityDevice securityDisable the Clear TPM button
Windows ComponentsWindows SecurityDevice securityHide the Device security area
Windows ComponentsWindows SecurityDevice securityHide the Secure boot area
Windows ComponentsWindows SecurityDevice securityHide the Security processor (TPM) troubleshooter page
Windows ComponentsWindows SecurityDevice securityHide the TPM Firmware Update recommendation
Windows ComponentsWindows SecurityEnterprise CustomizationConfigure customized contact information
Windows ComponentsWindows SecurityEnterprise CustomizationConfigure customized notifications
Windows ComponentsWindows SecurityEnterprise CustomizationSpecify contact company name
Windows ComponentsWindows SecurityEnterprise CustomizationSpecify contact email address or Email ID
Windows ComponentsWindows SecurityEnterprise CustomizationSpecify contact phone number or Skype ID
Windows ComponentsWindows SecurityEnterprise CustomizationSpecify contact website
Windows ComponentsWindows SecurityFamily optionsHide the Family options area
Windows ComponentsWindows SecurityFirewall and network protectionHide the Firewall and network protection area
Windows ComponentsWindows SecurityNotificationsHide all notifications
Windows ComponentsWindows SecurityNotificationsHide non-critical notifications
Windows ComponentsWindows SecuritySystrayHide Windows Security Systray
Windows ComponentsWindows SecurityVirus and threat protectionHide the Ransomware data recovery area
Windows ComponentsWindows SecurityVirus and threat protectionHide the Virus and threat protection area
Windows ComponentsWindows UpdateDisplay options for update notifications
Windows ComponentsWindows UpdateRemove access to 'Pause updates' feature

Control Panel

Control PanelSettings Page Visibility
Control PanelRegional and Language OptionsAllow users to enable online speech recognition services

Network

NetworkWindows Connection ManagerEnable Windows to soft-disconnect a computer from a network

New Group Policy settings in Windows 10, version 1803

The following Group Policy settings were added in Windows 10, version 1803:

System

SystemCredentials DelegationEncryption Oracle Remediation
SystemGroup PolicyPhone-PC linking on this device
SystemOS PoliciesAllow upload of User Activities

Windows Components

Windows ComponentsApp PrivacyLet Windows apps access an eye tracker device
Windows ComponentsCloud ContentTurn off Windows Spotlight on Settings
Windows ComponentsData Collection and Preview BuildsAllow device name to be sent in Windows diagnostic data
Windows ComponentsData Collection and Preview BuildsConfigure telemetry opt-in setting user interface
Windows ComponentsData Collection and Preview BuildsConfigure telemetry opt-in change notifications
Windows ComponentsDelivery OptimizationMaximum Background Download Bandwidth (percentage)
Windows ComponentsDelivery OptimizationMaximum Foreground Download Bandwidth (percentage)
Windows ComponentsDelivery OptimizationSelect the source of Group IDs
Windows ComponentsDelivery OptimizationDelay background download from http (in secs)
Windows ComponentsDelivery OptimizationDelay Foreground download from http (in secs)
Windows ComponentsDelivery OptimizationSelect a method to restrict Peer Selection
Windows ComponentsDelivery OptimizationSet Business Hours to Limit Background Download Bandwidth
Windows ComponentsDelivery OptimizationSet Business Hours to Limit Foreground Download Bandwidth
Windows ComponentsIMETurn on Live Sticker
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostDevice and Resource RedirectionDo not allow video capture redirection
Windows ComponentsRemote Desktop ServicesRemote Desktop Session HostRemote Session EnvironmentUse hardware graphics adapters for all Remote Desktop Services sessions
Windows ComponentsSearchAllow Cortana Page in OOBE on an AAD account
Windows ComponentsStoreDisable all apps from Microsoft Store
Windows ComponentsText InputAllow Uninstallation of Language Features
Windows ComponentsText InputImprove inking and typing recognition
Windows ComponentsWindows Defender Application GuardAllow hardware-accelerated rendering for Windows Defender Application Guard
Windows ComponentsWindows Defender Security CenterAccount protectionHide the Account protection area
Windows ComponentsWindows Defender Security CenterDevice securityHide the Device security area
Windows ComponentsWindows Defender Security CenterDevice securityHide the Security processor (TPM) troubleshooter page
Windows ComponentsWindows Defender Security CenterDevice securityHide the Secure boot area
Windows ComponentsWindows Defender Security CenterVirus and threat protectionHide the Ransomware data recovery area

New Group Policy settings in Windows 10, version 1709

The following Group Policy settings were added in Windows 10, version 1709:

Control Panel

Control PanelAllow Online Tips

Network

NetworkNetwork Connectivity Status IndicatorSpecify global DNS
NetworkWWAN ServiceWWAN UI SettingsSet Per-App Cellular Access UI Visibility
NetworkWWAN ServiceCellular Data AccessLet Windows apps access cellular data

System

SystemDevice Health Attestation ServiceEnable Device Health Attestation Monitoring and Reporting
SystemOS PoliciesEnables Activity Feed
SystemOS PoliciesAllow publishing of User Activities
SystemPower ManagementPower Throttling SettingsTurn off Power Throttling
SystemStorage HealthAllow downloading updates to the Disk Failure Prediction Model
SystemTrusted Platform Module ServicesConfigure the system to clear the TPM if it is not in a ready state.

Windows Components

Windows ComponentsApp PrivacyLet Windows apps communicate with unpaired devices
Windows ComponentsData Collection and Preview BuildsLimit Enhanced diagnostic data to the minimum required by Windows Analytics
Windows ComponentsHandwritingHandwriting Panel Default Mode Docked
Windows ComponentsInternet ExplorerInternet SettingsAdvanced settingsBrowsingHide the button (next to the New Tab button) that opens Microsoft Edge
Windows ComponentsMDMAuto MDM Enrollment with AAD Token
Windows ComponentsMessagingAllow Message Service Cloud Sync
Windows ComponentsMicrosoft EdgeAlways show the Books Library in Microsoft Edge
Windows ComponentsMicrosoft EdgeProvision Favorites
Windows ComponentsMicrosoft EdgePrevent changes to Favorites on Microsoft Edge
Windows ComponentsMicrosoft FIDO AuthenticationEnable usage of FIDO devices to sign on
Windows ComponentsOneDrivePrevent OneDrive from generating network traffic until the user signs in to OneDrive
Windows ComponentsPush To InstallTurn off Push To Install service
Windows ComponentsSearchAllow Cloud Search
Windows ComponentsWindows Defender Application GuardAllow data persistence for Windows Defender Application Guard
Windows ComponentsWindows Defender Application GuardAllow auditing events in Windows Defender Application Guard
Windows ComponentsMicrosoft Defender AntivirusWindows Defender Exploit GuardNetwork ProtectionPrevent users and apps from accessing dangerous websites
Windows ComponentsMicrosoft Defender AntivirusWindows Defender Exploit GuardControlled Folder AccessConfigure Controlled folder access
Windows ComponentsMicrosoft Defender AntivirusWindows Defender Exploit GuardAttack Surface ReductionConfigure Attack Surface Reduction rules
Windows ComponentsMicrosoft Defender AntivirusWindows Defender Exploit GuardAttack Surface ReductionExclude files and paths from Attack Surface Reduction Rules
Windows ComponentsMicrosoft Defender AntivirusWindows Defender Exploit GuardControlled Folder AccessConfigure allowed applications
Windows ComponentsMicrosoft Defender AntivirusWindows Defender Exploit GuardControlled Folder AccessConfigure protected folders
Windows ComponentsWindows Defender Exploit GuardExploit ProtectionUse a common set of exploit protection settings
Windows ComponentsWindows Defender Security CenterVirus and threat protectionHide the Virus and threat protection area
Windows ComponentsWindows Defender Security CenterFirewall and network protectionHide the Firewall and network protection area
Windows ComponentsWindows Defender Security CenterApp and browser protectionHide the App and browser protection area
Windows ComponentsWindows Defender Security CenterApp and browser protectionPrevent users from modifying settings
Windows ComponentsWindows Defender Security CenterDevice performance and healthHide the Device performance and health area
Windows ComponentsWindows Defender Security CenterFamily optionsHide the Family options area
Windows ComponentsWindows Defender Security CenterNotificationsHide all notifications
Windows ComponentsWindows Defender Security CenterNotificationsHide non-critical notifications
Windows ComponentsWindows Defender Security CenterEnterprise CustomizationConfigure customized notifications
Windows ComponentsWindows Defender Security CenterEnterprise CustomizationConfigure customized contact information
Windows ComponentsWindows Defender Security CenterEnterprise CustomizationSpecify contact company name
Windows ComponentsWindows Defender Security CenterEnterprise CustomizationSpecify contact phone number or Skype ID
Windows ComponentsWindows Defender Security CenterEnterprise CustomizationSpecify contact email address or Email ID
Windows ComponentsWindows Defender Security CenterEnterprise CustomizationSpecify contact website
Windows ComponentsWindows Hello for BusinessConfigure device unlock factors
Windows ComponentsWindows Hello for BusinessConfigure dynamic lock factors
Windows ComponentsWindows Hello for BusinessTurn off smart card emulation
Windows ComponentsWindows Hello for BusinessAllow enumeration of emulated smart card for all users
Windows ComponentsWindows UpdateAllow updates to be downloaded automatically over metered connections
Windows ComponentsWindows UpdateDo not allow update deferral policies to cause scans against Windows Update

New Group Policy settings in Windows 10, version 1703

The following Group Policy settings were added in Windows 10, version 1703:

Control Panel

Control PanelAdd or Remove ProgramsSpecify default category for Add New Programs
Control PanelAdd or Remove ProgramsHide the 'Add a program from CD-ROM or floppy disk' option
Control PanelPersonalizationPrevent changing lock screen and logon image

Network

NetworkBackground Intelligent Transfer Service (BITS)Limit the maximum network bandwidth for BITS background transfers
NetworkBackground Intelligent Transfer Service (BITS)Allow BITS Peercaching
NetworkBackground Intelligent Transfer Service (BITS)Limit the age of files in the BITS Peercache
NetworkBackground Intelligent Transfer Service (BITS)Limit the BITS Peercache size
NetworkDNS ClientAllow NetBT queries for fully qualified domain names
NetworkNetwork ConnectionsProhibit access to properties of components of a LAN connection
NetworkNetwork ConnectionsAbility to Enable/Disable a LAN connection
NetworkOffline FilesTurn on economical application of administratively assigned Offline Files
NetworkOffline FilesConfigure slow-link mode
NetworkOffline FilesEnable Transparent Caching
NetworkMicrosoft Peer-to-Peer Networking ServicesPeer Name Resolution ProtocolSite-Local CloudsSet the Seed Server
NetworkMicrosoft Peer-to-Peer Networking ServicesDisable password strength validation for Peer Grouping

System

SystemApp-VStreamingLocation Provider
SystemApp-VStreamingCertificate Filter For Client SSL
SystemCredentials DelegationAllow delegating default credentials with NTLM-only server authentication
SystemCtrl+Alt+Del OptionsRemove Change Password
SystemCtrl+Alt+Del OptionsRemove Lock Computer
SystemCtrl+Alt+Del OptionsRemove Task Manager
SystemCtrl+Alt+Del OptionsRemove Logoff
SystemDevice InstallationDo not send a Windows error report when a generic driver is installed on a device
SystemDevice InstallationPrevent Windows from sending an error report when a device driver requests additional software during installation
SystemLocale ServicesDisallow user override of locale settings
SystemLogonDo not process the legacy run list
SystemLogonAlways use custom logon background
SystemLogonDo not display network selection UI
SystemLogonBlock user from showing account details on sign-in
SystemLogonTurn off app notifications on the lock screen
SystemUser ProfilesEstablish timeout value for dialog boxes
SystemEnable Windows NTP ServerWindows Time ServiceEnable Windows NTP Client

Windows Components

Windows ComponentsActiveX Installer ServiceApproved Installation Sites for ActiveX Controls
Windows ComponentsActiveX Installer ServiceEstablish ActiveX installation policy for sites in Trusted zones
Windows ComponentsApplication CompatibilityTurn off Application Compatibility Engine
Windows ComponentsApplication CompatibilityTurn off Program Compatibility Assistant
Windows ComponentsApplication CompatibilityTurn off Steps Recorder
Windows ComponentsAttachment ManagerNotify antivirus programs when opening attachments
Windows ComponentsBiometricsAllow the use of biometrics
Windows ComponentsNetMeetingDisable Whiteboard
Windows ComponentsData Collection and Preview BuildsConfigure the Commercial ID
Windows ComponentsFile ExplorerDisplay the menu bar in File Explorer
Windows ComponentsFile HistoryTurn off File History
Windows ComponentsInternet ExplorerInternet Control PanelAdvanced PagePlay animations in web pages
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageTrusted Sites ZoneTurn on Cross-Site Scripting Filter
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageInternet ZoneTurn on Cross-Site Scripting Filter
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageLocked-Down Internet ZoneRun ActiveX controls and plugins
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageLocked-Down Internet ZoneScript ActiveX controls marked safe for scripting
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageIntranet ZoneRun ActiveX controls and plugins
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageIntranet ZoneScript ActiveX controls marked safe for scripting
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageLocked-Down Intranet ZoneRun ActiveX controls and plugins
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageLocked-Down Intranet ZoneScript ActiveX controls marked safe for scripting
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageLocal Machine ZoneRun ActiveX controls and plugins
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageLocal Machine ZoneScript ActiveX controls marked safe for scripting
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageLocked-Down Local Machine ZoneRun ActiveX controls and plugins
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageLocked-Down Local Machine ZoneScript ActiveX controls marked safe for scripting
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageRestricted Sites ZoneRun ActiveX controls and plugins
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageRestricted Sites ZoneScript ActiveX controls marked safe for scripting
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageLocked-Down Restricted Sites ZoneRun ActiveX controls and plugins
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageLocked-Down Restricted Sites ZoneScript ActiveX controls marked safe for scripting
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageTrusted Sites ZoneRun ActiveX controls and plugins
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageTrusted Sites ZoneScript ActiveX controls marked safe for scripting
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageLocked-Down Trusted Sites ZoneRun ActiveX controls and plugins
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageLocked-Down Trusted Sites ZoneScript ActiveX controls marked safe for scripting
Windows ComponentsInternet ExplorerAcceleratorsRestrict Accelerators to those deployed through Group Policy
Windows ComponentsInternet ExplorerCompatibility ViewTurn on Internet Explorer 7 Standards Mode
Windows ComponentsLocation and SensorsWindows Location ProviderTurn off Windows Location Provider
Windows ComponentsMicrosoft AccountBlock all consumer Microsoft account user authentication
Windows ComponentsMicrosoft EdgeConfigure Autofill
Windows ComponentsMicrosoft EdgeAllow Developer Tools
Windows ComponentsMicrosoft EdgeConfigure Do Not Track
Windows ComponentsMicrosoft EdgeAllow InPrivate browsing
Windows ComponentsMicrosoft EdgeConfigure Password Manager
Windows ComponentsMicrosoft EdgeConfigure Pop-up Blocker
Windows ComponentsMicrosoft EdgeAllow search engine customization
Windows ComponentsMicrosoft EdgeConfigure search suggestions in Address bar
Windows ComponentsMicrosoft EdgeSet default search engine
Windows ComponentsMicrosoft EdgeConfigure additional search engines
Windows ComponentsMicrosoft EdgeConfigure the Enterprise Mode Site List
Windows ComponentsMicrosoft EdgePrevent using Localhost IP address for WebRTC
Windows ComponentsMicrosoft EdgeConfigure Start pages
Windows ComponentsMicrosoft EdgeDisable lockdown of Start pages
Windows ComponentsMicrosoft EdgePrevent bypassing Windows Defender SmartScreen prompts for sites
Windows ComponentsMicrosoft EdgePrevent bypassing Windows Defender SmartScreen prompts for files
Windows ComponentsMicrosoft Management ConsoleRestricted/Permitted snap-ins.Net Framework Configuration
Windows ComponentsWindows InstallerProhibit use of Restart Manager
Windows ComponentsDesktop GadgetsRestrict unpacking and installation of gadgets that are not digitally signed.
Windows ComponentsDesktop GadgetsTurn Off user-installed desktop gadgets
Windows ComponentsOneDrivePrevent the usage of OneDrive for file storage
Windows ComponentsOneDrivePrevent the usage of OneDrive for file storage on Windows 8.1
Windows ComponentsOneDrivePrevent OneDrive files from syncing over metered connections
Windows ComponentsOneDriveSave documents to OneDrive by default
Windows ComponentsSmart CardAllow certificates with no extended key usage certificate attribute
Windows ComponentsSmart CardTurn on certificate propagation from smart card
Windows ComponentsTablet PCPen UX BehaviorsPrevent flicks
Windows ComponentsBitLocker Drive EncryptionChoose drive encryption method and cipher strength (Windows 8, Windows Server 2012, Windows 8.1, Windows Server 2012 R2, Windows 10 [Version 1507])
Windows ComponentsMicrosoft Defender AntivirusReal-time ProtectionTurn on behavior monitoring
Windows ComponentsMicrosoft Defender AntivirusSignature UpdatesDefine file shares for downloading definition updates
Windows ComponentsMicrosoft Defender AntivirusSignature UpdatesTurn on scan after signature update
Windows ComponentsFile ExplorerDisplay confirmation dialog when deleting files
Windows ComponentsInternet ExplorerInternet Control PanelSecurity PageLocked-Down Restricted Sites ZoneAllow OpenSearch queries in File Explorer
Windows ComponentsWindows UpdateRemove access to use all Windows Update features
Windows ComponentsWindows UpdateConfigure Automatic Updates
Windows ComponentsWindows UpdateSpecify intranet Microsoft update service location
Windows ComponentsWindows UpdateAutomatic Updates detection frequency
Windows ComponentsWindows UpdateAllow non-administrators to receive update notifications
Windows ComponentsWindows UpdateAllow Automatic Updates immediate installation
Windows ComponentsWindows UpdateTurn on recommended updates via Automatic Updates
Windows ComponentsShutdown OptionsTurn off legacy remote shutdown interface

For a spreadsheet of Group Policy settings included in Windows 10 and Windows Server 2016, see Group Policy Settings Reference for Windows and Windows Server.

New MDM policies

Mobile device management (MDM) for Windows 10 Pro, Windows 10 Enterprise, Windows 10 Education, and Windows 10 Mobile includes settings from Windows Phone 8.1, plus new or enhanced settings for Windows 10, such as:

Defender (Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education only)
Enhanced Bluetooth policies
Passport and Hello
Device update
Hardware-based device health attestation
Kiosk mode, start screen, start menu layout
Security
VPN and enterprise Wi-Fi management
Certificate management
Windows Tips
Consumer experiences, such as suggested apps in Start and app tiles from Microsoft dynamically inserted in the default Start menu

Windows 10, version 1703, adds a number of ADMX-backed policies to MDM.

If you use Microsoft Intune for MDM, you can configure custom policies to deploy Open Mobile Alliance Uniform Resource Identifier (OMA-URI) settings that can be used to control features on Windows 10. For a list of OMA-URI settings, see Custom URI settings for Windows 10 devices.

No new Exchange ActiveSync policies. For more information, see the ActiveSync configuration service provider technical reference.

Get the Remote Desktop client

Follow these steps to get started with Remote Desktop on your Mac:

Download the Microsoft Remote Desktop client from the Mac App Store.
Set up your PC to accept remote connections. (If you skip this step, you can't connect to your PC.)
Add a Remote Desktop connection or a remote resource. You use a connection to connect directly to a Windows PC and a remote resource to use a RemoteApp program, session-based desktop, or a virtual desktop published on-premises using RemoteApp and Desktop Connections. This feature is typically available in corporate environments.

Updating Built In Remote Desktop Connection Client

What about the Mac beta client?

We're testing new features on our preview channel on AppCenter. Want to check it out? Go to Microsoft Remote Desktop for Mac and select Download. You don't need to create an account or sign into AppCenter to download the beta client.

If you already have the client, you can check for updates to ensure you have the latest version. In the beta client, select Microsoft Remote Desktop Beta at the top, and then select Check for updates.

Add a workspace

Subscribe to the feed your admin gave you to get the list of managed resources available to you on your macOS device.

To subscribe to a feed:

Select Add feed on the main page to connect to the service and retrieve your resources.
Enter the feed URL. This can be a URL or email address:
- This URL is usually a Windows Virtual Desktop URL. Which one you use depends on which version of Windows Virtual Desktop you're using.
  - For Windows Virtual Desktop (classic), use https://rdweb.wvd.microsoft.com/api/feeddiscovery/webfeeddiscovery.aspx.
  - For Windows Virtual Desktop, use https://rdweb.wvd.microsoft.com/api/arm/feeddiscovery.
- To use email, enter your email address. This tells the client to search for a URL associated with your email address if your admin configured the server that way.
Select Subscribe.
Sign in with your user account when prompted.

Install Remote Desktop Windows 10

After you've signed in, you should see a list of available resources.

Once you've subscribed to a feed, the feed's content will update automatically on a regular basis. Resources may be added, changed, or removed based on changes made by your administrator.

Export and import connections

You can export a remote desktop connection definition and use it on a different device. Remote desktops are saved in separate RDP files.

To export an RDP file:

In the Connection Center, right-click the remote desktop.
Select Export.
Browse to the location where you want to save the remote desktop RDP file.
Select OK.

To import an RDP file:

In the menu bar, select File > Import.
Browse to the RDP file.
Select Open.

Add a remote resource

Remote resources are RemoteApp programs, session-based desktops, and virtual desktops published using RemoteApp and Desktop Connections.

The URL displays the link to the RD Web Access server that gives you access to RemoteApp and Desktop Connections.
The configured RemoteApp and Desktop Connections are listed.

To add a remote resource:

In the Connection Center select +, and then select Add Remote Resources.
Enter information for the remote resource:
- Feed URL - The URL of the RD Web Access server. You can also enter your corporate email account in this field – this tells the client to search for the RD Web Access Server associated with your email address.
- User name - The user name to use for the RD Web Access server you are connecting to.
- Password - The password to use for the RD Web Access server you are connecting to.
Select Save.

The remote resources will be displayed in the Connection Center.

Connect to an RD Gateway to access internal assets

Rd Client Windows 10 Download

A Remote Desktop Gateway (RD Gateway) lets you connect to a remote computer on a corporate network from anywhere on the Internet. You can create and manage your gateways in the preferences of the app or while setting up a new desktop connection.

To set up a new gateway in preferences:

Rd Client Windows 10 1 16

In the Connection Center, select Preferences > Gateways.
Select the + button at the bottom of the table Enter the following information:
- Server name – The name of the computer you want to use as a gateway. This can be a Windows computer name, an Internet domain name, or an IP address. You can also add port information to the server name (for example: RDGateway:443 or 10.0.0.1:443).
- User name - The user name and password to be used for the Remote Desktop gateway you are connecting to. You can also select Use connection credentials to use the same user name and password as those used for the remote desktop connection.

Manage your user accounts

When you connect to a desktop or remote resources, you can save the user accounts to select from again. You can manage your user accounts by using the Remote Desktop client.

To create a new user account:

In the Connection Center, select Settings > Accounts.
Select Add User Account.
Enter the following information:
- User Name - The name of the user to save for use with a remote connection. You can enter the user name in any of the following formats: user_name, domainuser_name, or user_name@domain.com.
- Password - The password for the user you specified. Every user account that you want to save to use for remote connections needs to have a password associated with it.
- Friendly Name - If you are using the same user account with different passwords, set a friendly name to distinguish those user accounts.
Select Save, then select Settings.

Customize your display resolution

You can specify the display resolution for the remote desktop session.

In the Connection Center, select Preferences.
Select Resolution.
Select +.
Enter a resolution height and width, and then select OK.

To delete the resolution, select it, and then select -.

Displays have separate spaces

If you're running Mac OS X 10.9 and have disabled Displays have separate spaces in Mavericks (System Preferences > Mission Control), you need to configure this setting in the Remote Desktop client using the same option.

Drive redirection for remote resources

Drive redirection is supported for remote resources, so that you can save files created with a remote application locally to your Mac. The redirected folder is always your home directory displayed as a network drive in the remote session.

Note

In order to use this feature, the administrator needs to set the appropriate settings on the server.

Use a keyboard in a remote session

Mac keyboard layouts differ from the Windows keyboard layouts.

The Command key on the Mac keyboard equals the Windows key.
To perform actions that use the Command button on the Mac, you will need to use the control button in Windows (for example Copy = Ctrl+C).
The function keys can be activated in the session by pressing additionally the FN key (for example, FN+F1).
The Alt key to the right of the space bar on the Mac keyboard equals the Alt Gr/right Alt key in Windows.

By default, the remote session will use the same keyboard locale as the OS you're running the client on. (If your Mac is running an en-us OS, that will be used for the remote sessions as well.) If the OS keyboard locale is not used, check the keyboard setting on the remote PC and change it manually. See the Remote Desktop Client FAQ for more information about keyboards and locales.

Support for Remote Desktop gateway pluggable authentication and authorization

Windows Server 2012 R2 introduced support for a new authentication method, Remote Desktop Gateway pluggable authentication and authorization, which provides more flexibility for custom authentication routines. You can now try this authentication model with the Mac client.

Important

Custom authentication and authorization models before Windows 8.1 aren't supported, although the article above discusses them.

To learn more about this feature, check out https://aka.ms/paa-sample.

Tip

Rd Client Download Windows 10

Questions and comments are always welcome. However, please do NOT post a request for troubleshooting help by using the comment feature at the end of this article. Instead, go to the Remote Desktop client forum and start a new thread. Have a feature suggestion? Tell us in the client user voice forum.

Cloud 365

Cisco Anyconnect Download Mac Big Sur

Loadtropical520

Rd Client Windows 10

New Group Policy settings in Windows 10, version 1903

New Group Policy settings in Windows 10, version 1809

New Group Policy settings in Windows 10, version 1803

New Group Policy settings in Windows 10, version 1709

New Group Policy settings in Windows 10, version 1703

New MDM policies

Related topics

Get the Remote Desktop client

Updating Built In Remote Desktop Connection Client

What about the Mac beta client?

Add a workspace

Install Remote Desktop Windows 10

Export and import connections

Add a remote resource

Connect to an RD Gateway to access internal assets

Rd Client Windows 10 Download

Rd Client Windows 10 1 16

Manage your user accounts

Customize your display resolution

Displays have separate spaces

Drive redirection for remote resources

Use a keyboard in a remote session

Support for Remote Desktop gateway pluggable authentication and authorization

Rd Client Download Windows 10