Administrative Templates (admx) for Windows 10 May 2020 Update released

Microsoft has published the administrative templates for Windows 10 version 2004, the new feature update for Windows 10 that Microsoft released last month to the public.

Professional versions of Windows 10 come with a set of policies that administrators may configure using the Group Policy Editor. Administrators may extend the default set of policies by installing the Windows 10 Administrative Templates.

These templates install additional policies on Windows 10 devices. Microsoft updates the optional administrative templates every time it releases a new feature update for the operating system.

The latest at the time of writing, Administrative Templates for Windows 10 version 2004, the May 2020 Update, is now available.

All it requires is to download the 12.9 Megabyte msi file to the local system. The downloaded file may be installed directly on a target system or it may be extracted using a tool such as 7-Zip instead to take a look at the templates that it installs prior to installing them.

The templates (admx) are available for several languages including English, Russian, German, French, Spanish, Chinese, Portuguese and Polish.

Administrators who compare the number of policies against the previous version will notice that the number of included policies has decreased by about 200. The drop is caused by the removal of msedge.admx.

Administrative Templates for Windows 10 version 2004 includes the following new policies:

1. Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Account Policies > Password Policy > Minimum Password Length Audit
   • Determines the minimum password length for which password length audit warning events are issued.
2. Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Account Policies > Password Policy > Relax minimum password length limits
   • Defines if the minimum password length setting can be increased beyond the legacy limit of 14.
3. Local Computer Policy > Computer Configuration > Administrative Templates > System > Logon > Turn on security key sign-in
   • This policy setting allows you to control whether users can sign in using external security keys.
4. Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Components > App Privacy > Let Windows apps access user movements while running in the background
   • Specifies whether applications may access the movement of a user's head, hands, motion controllers, and other tracked objects, while they runs in the background.
5. Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Components > App Package Deployment > Prevent non-admin users from installing packaged Windows apps
   • Prevent the installation of packaged Windows apps by non-administrators.
6. Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Delivery Optimization > Maximum Foreground Download Bandwidth in KB/s
   • Set the maximum foreground download bandwidth that the device can use across all concurrent download activities using Delivery Optimization.
7. Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Delivery Optimization > Maximum Background Download Bandwidth in KB/s
   • Set the maximum background download bandwidth that the device can use across all concurrent download activities using Delivery Optimization.
8. Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Delivery Optimization > Cache Server Hostname Source
   • Specifies how clients discover Delivery Optimization in Network Cache servers dynamically. Options are 1=DHCP Option 235, 2=DHCP Option 235 Force.
9. Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Internet Explorer > Configure which channel of Microsoft Edge to use for opening redirected sites
   • Define which version of Chromium Edge is going to used for opening redirected sites.
10. Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Components > Microsoft Defender Antivirus > MpEngine > Enable file hash for computation feature
    • Microsoft Defender will compute hash values for files it scans if enabled.
11. Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Update > Windows Update for Business > Select the target Feature Update version
    1. Enable this policy to request a specific Feature Update version in future scans.
12. Local Computer Policy > User Configuration > Administrative Templates > Windows Components > IME > Configure Japanese IME version
13. Local Computer Policy > User Configuration > Administrative Templates > Windows Components > IME > Configure Simplified Chinese IME version
14. Local Computer Policy > User Configuration > Administrative Templates > Windows Components > IME > Configure Traditional Chinese IME version
    • Defines whether users may control the IME version to use in the selected language.

Microsoft removed five policies in the new administrative templates:

• Delivery Optimization > Max Upload Bandwidth (in KB/s)
• Delivery Optimization > Maximum Download Bandwidth (in KB/s)
• Delivery Optimization > Maximum Download Bandwidth (percentage)
• Windows Defender Application Guard > Allow users to trust files that open in Windows Defender Application Guard
• Windows Defender Application Guard > Configure additional sources for untrusted files in Windows Defender Application Guard

Now You: do you use policies on Windows?

Advertisement