Solved Change to Group Policies in W11 25H2


tecknot

living in a van down by the river
Power User
Local time
3:39 PM
Posts
391
OS
Windows 11 Pro 25H2 build 26200.8457
Hello everyone,

According to this article by Zac Bowden of Windows Central: Windows 11 version 25H2: Everything you need to know about Microsoft's latest OS release, "The company [MS] has confirmed that version 25H2 includes new Group Policies that allows commercial customers to easily configure which apps get installed on Windows 11 PCs..."

Does this mean we/I will have to reset all the changes made to the Group Policies after updating to 25H2?

Asking for a friend.

Kind regards,

tecknot
 

My Computer

System One

  • OS
    Windows 11 Pro 25H2 build 26200.8457
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo ThinkPad Workstation P72
    CPU
    Intel i7 8750H @ 2.2 GHz
    Motherboard
    Lenovo 01YU291
    Memory
    16 GB (all Samsung) DDR4-3200 SODIMM (non-ECC) PCIe 3
    Graphics Card(s)
    Intel UHD Graphics 630 & NVIDIA Quadro P600
    Sound Card
    Realtek ALC3286 & Focusrite Saffire 24 Pro DSP
    Monitor(s) Displays
    17.3"
    Screen Resolution
    3840x2160
    Hard Drives
    1TB SSD Samsung 860 EVO SATA 3
    1TB SSD Samsung 970 EVO M.2 NVMe PCIe 3 x 4
    2TB SSD Samsung 990 PRO M.2 NVMe PCIe 3 x 4
    PSU
    230W
    Cooling
    fan
    Keyboard
    UltraNav
    Mouse
    Kensington wireless Orbit
    Internet Speed
    640Mbps
    Browser
    DuckDuckGo and Firefox
    Antivirus
    Defender
    Other Info
    CM246 Chipset
Group Policy is not available in Home version of Windows, only Pro and Enterprise, no matter what version of Windows 11 you are running.
Any policies you have set previously will still be in affect.
There are new policies available now if you want to tweak other apps.
 

My Computer

System One

  • OS
    Windows 11 Pro Insider 64 bit 25H2 26200.5742
    Computer type
    PC/Desktop
    Manufacturer/Model
    Gigabyte Z390 UD
    CPU
    Intel Core i7 9700K 3.60
    Motherboard
    Gigabyte Z390 UD
    Memory
    16 GB
    Graphics Card(s)
    nVidia GEForce RTX 2060 Super
    Sound Card
    onboard
    Monitor(s) Displays
    Two 27" Dell 4K monitors
    Screen Resolution
    3840 x 2160
    Hard Drives
    M.2 NVME SSD, 500 GB; Two 2TB Mechanical HDD's
    PSU
    850w PSU
    Case
    Cyberpower PC
    Cooling
    Water cooled
    Keyboard
    Backlit Cyberpower gaming keyboard
    Mouse
    Backlit Cyberpower gaming mouse
    Internet Speed
    1 GB mbps
    Browser
    Brave
    Antivirus
    Windows Security
No, they’re additional policies to control things in 25H2.
 

My Computer

System One

  • OS
    Windows 11 Pro 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Intel NUC12WSHi7
    CPU
    12th Gen Core i7-1260P
    Motherboard
    NUC12WSBi7
    Memory
    64 GB Micron PC4-25600
    Graphics Card(s)
    Intel Iris Xe Graphics
    Sound Card
    on-board Realtek HD Audio
    Monitor(s) Displays
    Dell U3219Q
    Screen Resolution
    3840 x 2160
    Hard Drives
    Samsung SSD 990 PRO 1TB
    Crucial MX500 2 TB
    Antivirus
    Microsoft Defender

Edit: Was looking for this; should have known our boy Brink had us covered.

 
Last edited:

My Computer

System One

  • OS
    Windows 11 Pro 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Intel NUC12WSHi7
    CPU
    12th Gen Core i7-1260P
    Motherboard
    NUC12WSBi7
    Memory
    64 GB Micron PC4-25600
    Graphics Card(s)
    Intel Iris Xe Graphics
    Sound Card
    on-board Realtek HD Audio
    Monitor(s) Displays
    Dell U3219Q
    Screen Resolution
    3840 x 2160
    Hard Drives
    Samsung SSD 990 PRO 1TB
    Crucial MX500 2 TB
    Antivirus
    Microsoft Defender
OK! Thanks, guys.

Kind regards,

tecknot
 

My Computer

System One

  • OS
    Windows 11 Pro 25H2 build 26200.8457
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo ThinkPad Workstation P72
    CPU
    Intel i7 8750H @ 2.2 GHz
    Motherboard
    Lenovo 01YU291
    Memory
    16 GB (all Samsung) DDR4-3200 SODIMM (non-ECC) PCIe 3
    Graphics Card(s)
    Intel UHD Graphics 630 & NVIDIA Quadro P600
    Sound Card
    Realtek ALC3286 & Focusrite Saffire 24 Pro DSP
    Monitor(s) Displays
    17.3"
    Screen Resolution
    3840x2160
    Hard Drives
    1TB SSD Samsung 860 EVO SATA 3
    1TB SSD Samsung 970 EVO M.2 NVMe PCIe 3 x 4
    2TB SSD Samsung 990 PRO M.2 NVMe PCIe 3 x 4
    PSU
    230W
    Cooling
    fan
    Keyboard
    UltraNav
    Mouse
    Kensington wireless Orbit
    Internet Speed
    640Mbps
    Browser
    DuckDuckGo and Firefox
    Antivirus
    Defender
    Other Info
    CM246 Chipset
Zac Bowden is specifically referring to a new GPO in 25H2 which allows the automatic removal of default apps (or re-removal as may be it's real purpose).

This can be performed by you, without needing a fancy GPO, by uninstalling Apps from Settings or using one the many available tutorials or guides which instruct you on using PowerShell Remove-AppxPackage commands. Or even everyone's favorite, REVO Uninstaller.

So you're really not missing out on anything, unless you're in the habit of constantly re-installing Windows.
 

My Computer

System One

  • OS
    Windows 7
Zac Bowden is specifically referring to a new GPO in 25H2 which allows the automatic removal of default apps (or re-removal as may be it's real purpose).

This can be performed by you, without needing a fancy GPO, by uninstalling Apps from Settings or using one the many available tutorials or guides which instruct you on using PowerShell Remove-AppxPackage commands. Or even everyone's favorite, REVO Uninstaller.

So you're really not missing out on anything, unless you're in the habit of constantly re-installing Windows.

Thank you, garlin. I will be using the enablement upgrade option once I update to 24H2. I am familiar with using the Remove-AppxPackage, PowerShell commands, but would be glad not to have to use them.

Kind regards,

tecknot
 

My Computer

System One

  • OS
    Windows 11 Pro 25H2 build 26200.8457
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo ThinkPad Workstation P72
    CPU
    Intel i7 8750H @ 2.2 GHz
    Motherboard
    Lenovo 01YU291
    Memory
    16 GB (all Samsung) DDR4-3200 SODIMM (non-ECC) PCIe 3
    Graphics Card(s)
    Intel UHD Graphics 630 & NVIDIA Quadro P600
    Sound Card
    Realtek ALC3286 & Focusrite Saffire 24 Pro DSP
    Monitor(s) Displays
    17.3"
    Screen Resolution
    3840x2160
    Hard Drives
    1TB SSD Samsung 860 EVO SATA 3
    1TB SSD Samsung 970 EVO M.2 NVMe PCIe 3 x 4
    2TB SSD Samsung 990 PRO M.2 NVMe PCIe 3 x 4
    PSU
    230W
    Cooling
    fan
    Keyboard
    UltraNav
    Mouse
    Kensington wireless Orbit
    Internet Speed
    640Mbps
    Browser
    DuckDuckGo and Firefox
    Antivirus
    Defender
    Other Info
    CM246 Chipset
Group Policy is not available in Home version of Windows, only Pro and Enterprise, no matter what version of Windows 11 you are running.
Not true. It's present but not enabled in Win10 and Win11 Home.
Microsoft has provided instructions here on how to enable it.
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    Manufacturer/Model
    Microsoft
    CPU
    Intel Core i5-8400
    Motherboard
    ASUS PRIME H370-PLUS
    Memory
    16GB
    Graphics Card(s)
    Intel UHD Graphics 630
    Sound Card
    On board
    Monitor(s) Displays
    Samsung SyncMaster 2043BWX
    Screen Resolution
    1680 x 1050
    Hard Drives
    Samsung SSD 850 256GB
    WDC 1TB NVMe
    WD 3TB external USB drive
    PSU
    I don't remember
    Case
    Corsair something-or-other
    Cooling
    Air CPU + 2 case fans
    Keyboard
    DAS S Pro (Cherry Brown)
    Mouse
    Logitech USB of some sort
Not true. It's present but not enabled in Win10 and Win11 Home.
Microsoft has provided instructions here on how to enable it.
there are plenty of instances that people can show that changing those GP even after enabling it does not actually reflect the registry, thus applying no changes. some may work but not all
 

My Computer

System One

  • OS
    Windows 11 Pro
While you can get Group Policy Editor running on Home, by design almost all policy changes are ignored by Home.

If you read the ADMX templates or the CSP policy guides, they will point out which GPO's that only work for Pro, EDU and Enterprise editions. And some policies will only work on EDU or Enterprise.

Policy-based inbox app removal
Policy-based inbox app removal in Windows allows IT administrators to remove preinstalled Microsoft Store apps from managed Enterprise and Education devices. This can be done using mobile device management (MDM), Configuration Service Provider (CSP) configuration profiles, or Group Policy (GP). This feature helps organizations streamline deployments by removing inbox apps that aren’t needed in their environments. While the policy is active, removed apps remain blocked from reinstallation, ensuring a consistent and controlled device experience.

Prerequisites and considerations​

  • Windows version: Devices must be running Windows 11, version 25H2 or newer.
  • Editions: Only Enterprise (ENT) and Education (EDU) editions support this feature.
 

My Computer

System One

  • OS
    Windows 7

Latest Support Threads

Back
Top Bottom