Windows 11 is a pretty complex operating system. We all know how to use it on the surface, but there are many layers of settings you probably didn't know you can change in Windows 11 using something called Group Policy Editor. This is a tool only available in Windows 11 Pro editions or higher, meaning Windows 11 Home users can't normally access it, and it can manage settings that are typically not available to users.
If you're new to this tool and you'd like to check out some of the things you can try in the Group Policy Editor, here are some of th ways it might improve your experience with Windows.
You can open the Group Policy Editor by opening the Windows search bar and typing gpedit.msc, and then pressing Enter.
1:18
Related
Windows 11 Home vs Windows 11 Pro: What's the difference?
Trying to choose between Windows 11 Home vs Pro? These are the main differences between the two editions you should be aware of.
10 Disable Microsoft Defender antivirus
You shouldn't do it, though
We would never recommend disabling the built-in Microsoft Defender antivirus, but if for some reason you really want it to stop running, the Group Policy Editor can do that. Here's how:
Using the navigation pane on the left, go to Computer configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus. On the main pane, double-click the option labeled Turn off Microsoft Defender Antivirus. Check the Enable checkbox near the top left corner, and click Apply, then OK.
After restarting your PC, you should see that Microsoft Defender is no longer functioning as normal. We highly recommend having another antivirus installed if you're going to do this.
1:27
Related
How to disable Microsoft Defender in Windows 11
Microsoft Defender offers solid baseline protection against malware, but sometimes, you might want to disable it. Here's how to do it.
9 Bypass Windows Update safeguards
It's risky, but it might be worth it
Big Windows 11 updates like version 24H2 usually have some safeguards in place for specific devices where apps or certain hardware may cause compatibility issues. This will prevent updates from being downloaded onto your system, and it's usually a good thing, but if you're feeling adventurous, you can remove the safeguards with Group Policy Editor.
Navigate to Computer configuration > Administrative Templates > Windows Components > Windows Update > Manage updates offered from WIndows Update. On the main section of the window, double-click Disable safeguards for Feature Updates. Set it to Enabled and click Apply, then OK.
You can now restart your PC to check if the update shows up. If it doesn't, keep in mind Microsoft rolls out updates gradually.
8 Disable USB drives (and others)
Don't let dangerous software into your PC
Close
USB drives are generally pretty useful, but if a computer is used by a lot of people in a public space, disabling USB drives can help prevent viruses. Similarly, you can block DVDs and CDs. Here's how:
Navigate to User Configuration > Administrative Templates > System > Removable Storage Access. On the main section of the window, double-click Removable disks: Deny read access.
For CDs and DVDs, you'll want to select CD and DVD: Deny read access. Other options are also listed for different kinds of media.
Set it to Enabled and click Apply, then OK.
This will prevent USB devices (and others) from being recognized by Windows, which could stop malicious files from being copied onto your machine.
7 Disable OneDrive
Stop the backups
Close
OneDrive comes preinstalled in Windows 11, and you can just uninstall it if you so choose, but if you want to prevent everyone from using it on your PC, Group Policy Editor is here to help. Here's how:
Navigate to Computer configuration > Administrative Templates > Windows Components > OneDrive. On the main section of the window, double-click Prevent the usage of OneDrive for file storage. Set it to Enabled and click Apply, then OK.
This will stop all users from using OneDrive, rather than doing it on a per-user basis.
2:32
Related
How to turn off OneDrive folder backup in Windows 11
Windows 11 comes with an annoying feature that automatically backs up and syncs certain folders with OneDrive. Here's how to turn it off.
6 Disable automatic driver updates
Windows Update isn't always the best for drivers
Windows Update will usually try to update your computer's drivers alongside Windows itself. While this is meant to streamline things, sometimes an older driver may bne overwritten by an older driver from Windows Update, which can be frustrating. You can stop driver updates through Windows Update by following these steps.
Navigate to Computer configuration > Administrative Templates > Windows Components > Windows Update > Manage updates offered from WIndows Update. On the main section of the Windows, double-click Do not include drivers with Windows Updates. Set it to Enabled and click Apply, then OK.
After this, your PC will stop installing drivers through Windows Update, so you'll have to update them manually.
Related
How to update drivers in Windows 11
If you find that a peripheral attached to your PC isn't working right, or a part of your PC isn't working, you'll have to update the drivers.
5 Stop toast notifications
Yes, for every app
When you receive a notification in Windows 11, you'll see it pop up in the bottom right corner of your screen. You can disable this for individual apps, but Windows doesn't make it easy to disable toast notifications altogether unless you use Do not disturb. Thankfully, the Group Policy Editor can also fix this:
Navigate to User Configuration > Administrative Templates > Start Menu and Taskbar > Notifications. On the main section of the window, double-click Turn off toast notifications. Set it to Enabled and click Apply, then OK.
Now you won't have to be annoyed by things popping up on screen when you get a notification.
Related
How to customize notification settings on Windows 11
Notifications can be useful, but also overwhelming at times. Here's how you can customize notification settings in Windows 11 to your liking.
4 Block software installations
People can install dangerous apps
If you're sharing a computer with someone who is not as tech-savvy, or you want to prevent certain kinds of apps from being installed, Group Policy Editor can help, too. However, this won't necessarily block new apps from being added, since many apps are portable and don't require a typical installation. Regardless, you can follow these steps:
Navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Installer. On the main section of the window, double-click Turn off Windows Installer. Set it to Enabled and click Apply, then OK.
3 Say goodbye to unexpected restarts
That update can wait
You've probably seen a couple videos of a computer restarting by itself when someone is playing a game or something, or maybe it's happened to you in the middle of work. However, you can prevent this.. Here's how:
Navigate to Computer Configuration > Administrator Templates > Windows Components > Windows Update. On the main section of the window, double-click No auto-restart with logged on users for scheduled automatic update installations. Set it to Enabled and click Apply, then OK.
With this, your PC won't automatically restart as long as there's a user logged on.
Related
How to stop receiving updates on Windows 11
Whatever your reason, if you'd rather Microsoft left your PC alone here's how to stop getting Windows 11 automatic updates.
2 Disable the Command Prompt and PowerShell
Stop the meddling
Close
The Command Prompt can sometimes be used to circumvent certain restrictions in Windows, so disabling it may also make sense. However, this doesn't disable Windows PowerShell or the Windows Terminal, which can do a lot of the same things, so you may also want to disale that. Gere's how to do it:
Navigate to User Configuration > Administrative Templates > System. On the main section of the window, double-click Prevent access to the command prompt. Set it to Enabled and click Apply, then OK. Now, click Don't run specific Windows applications. Set the checkbox to Enabled. Now, click Show to see the list of blocked apps. Double-click the first field and type in powershell.exe, then click OK. Click Apply and then OK.
This will block both apps from running. However, PowerShell is still accessible through Windows Terminal. You can uninstall Terminal, though, which should help counter this.
1 Block the Control Panel and Settings apps
Keep things as they are
Close
Finally, if you want to stop other users from messing with your PC settings, you can block the Control Panel and Settings apps. Here's how:
Navigate to User Configuration > Administrative Templates > Control Panel. On the main section of the window, double-click Prohibit access to Control Panel and PC Settings. Set it to Enabled and click Apply, then OK.
This will disable these two apps entirely, though the behavior will be a bit different. The Settings app simply won't launch, while Control Panel actually shows an error message.
You can also block specific parts of the Control Panel using the Hide specified Control Panel items or the Show only specified Control panel items options that are found on the same page. However, these won't affect the Settings app at all, so they're not super useful in Windows 11.
The Group Policy Editor is a powerful tool
As you can see, there's quite a lot that can be done using the Group Policy Editor. One thing we didn't mention here is the ability to stop updates from automatically downloading, instead notifying you when they're available. There are a lot more settings hidden away in this app, but we recommend treading carefully, as some of these options may break functionality you actually need. Either way, we've given you some options to get started and set up your PC how you like it.