Skip to content
Microsoft Intune Settings Catalog Expands Support for Windows 11 25H2 with 36 New Day-One Management Policies for IT Admins

Microsoft Intune Settings Catalog Expands Support for Windows 11 25H2 with 36 New Day-One Management Policies for IT Admins

Written By Anoop C Nair
Last Updated July 1, 2026
Posted In Intune
SHARE

Key Takeaways

  • Intune supports Windows 11 25H2 from day one.
  • 36 new settings are added to the settings catalog.
  • IT admins can control AI features like Recall and Copilot.
  • Policies help with user experience, compliance, and energy saving.

Hey, let’s discuss about Microsoft Intune Settings Catalog Expands Support for Windows 11 25H2 with 36 New Day-One Management Policies for IT Admins. With the recent release of Windows 11 version 25H2, Microsoft Intune introduced support for 36 new settings, allowing IT administrators to manage devices running the latest OS right from initial deployment, whether for testing or production. Ongoing investments in the settings catalog infrastructure ensure that new Windows policy settings are supported promptly, helping organizations quickly adopt new OS versions and features while keeping their environments secure, compliant, and well managed.

Table of Contents

Microsoft Intune Settings Catalog Expands Support for Windows 11 25H2 with 36 New Day-One Management Policies for IT Admins

Microsoft’s approach ensures Intune can manage devices running Windows 11 25H2 from day one, preventing compatibility gaps that could delay deployments or testing. With new controls for Recall, Copilot, and Cocreator, IT admins can decide how and if users interact with AI tools, helping maintain data protection and user privacy.

Settings for Start menu layout, backup, and privacy provide a standardised desktop experience, reducing confusion and support tickets, especially in managed environments like schools and public-sector institutions. Policies such as EnableEnergySaver support sustainability goals and can be enforced through compliance policies, while Microsoft continues to close the gap between new Windows releases and management readiness with day-zero Intune Settings Catalog support for Windows 11 25H2.

New Settings in the Settings Catalog

As part of day-zero support for Windows 11 version 25H2, the settings catalog now includes newly released settings for this version. These settings are available for configuration and can be used in device configuration profiles to manage Windows endpoints.

Patch My PC
Category NameNameFriendly Name
Administrative Templates\Windows Components\App Package DeploymentRemoveDefaultMicrosoftStorePackages
Remove Default Microsoft Store packages from the system
Administrative Templates\Windows Components\Sync your settingsEnableWindowsBackupEnable Windows Backup
AuditingAccountLogonLogoff_AuditGroupMembershipAccount Logon Logoff Audit Group Membership
Human PresenceForceOnlookerDetectionAction
Force Onlooker Detection Action
Human Presence
ForceOnlookerDetection

Force Onlooker Detection
Microsoft App StoreConfigureMSIXAuthenticationAuthorizedDomains
Configure MSIX Authentication Authorized Domains
News And InterestsDisableWidgetsBoardDisable Widgets Board
News And InterestsDisableWidgetsOnLockScreenDisable Widgets On Lock Screen
PowerEnableEnergySaverEnable Energy Saver
PrintersRequireIppsPolicyRequire Ipps Policy
PrivacyLetAppsAccessSystemAIModelsLet Apps Access System AI Models
StartTurnOffAbbreviatedDateTimeFormatTurn Off Abbreviated Date Time Format (User)
StartHideCategoryViewHide Category View (User)
StartConfigureStartPinsConfigure Start Pins (User)
StartAlwaysShowNotificationIconAlways Show Notification Icon (User)
StartConfigureStartPinsConfigure Start Pins
StartHideCategoryViewHide Category View
SystemAllowOOBEUpdatesAllow OOBE Updates
Windows AISetMaximumStorageSpaceForRecallSnapshotsSet Maximum Storage Space For Recall Snapshots
Windows AIDisableSettingsAgentDisable Settings Agent
Windows AIAllowRecallEnablementAllow Recall Enablement
Windows AISetDenyAppListForRecallSet Deny App List For Recall (User)
Windows AIDisableClickToDoDisable Click To Do (User)
Windows AISetCopilotHardwareKeySet Copilot Hardware Key (User)
Windows AISetDenyAppListForRecallSet Deny App List For Recall
Windows AIDisableImageCreatorDisable Image Creator
Windows AIDisableCocreatorDisable Cocreator
Windows AISetMaximumStorageSpaceForRecallSnapshotsSet Maximum Storage Space For Recall Snapshots (User)
Windows AIDisableClickToDoDisable Click To Do
Windows AISetDenyUriListForRecallSet Deny Uri List For Recall (User)
Windows AIDisableGenerativeFillDisable Generative Fill
Windows AISetDenyUriListForRecallSet Deny Uri List For Recall
DisplayConfigureMultipleDisplayModeConfigure Multiple Display Mode (User)
Windows Backup And RestoreEnableWindowsRestoreEnable Windows Restore
Microsoft Intune Settings Catalog Expands Support for Windows 11 25H2 with 36 New Day-One Management Policies for IT Admins – Table.1
Microsoft Intune Settings Catalog Expands Support for Windows 11 25H2 with 36 New Day-One Management Policies for IT Admins - Fig.1
Microsoft Intune Settings Catalog Expands Support for Windows 11 25H2 with 36 New Day-One Management Policies for IT Admins – Fig.1

Need Further Assistance or Have Technical Questions?

Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, join the WhatsApp Community  and the Whatsapp channel to get the latest news on Microsoft Technologies. We are there on Reddit as well

Author

Anoop C Nair is a Workplace Technology solution architect with 25+ years of experience. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He is a blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, and Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Entra, and Microsoft Security.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Simplify Windows Devices to Run Only the Required Applications using Intune

Key Takeaways Hey, let’s learn about Simplify Windows Devices to Run Only the Required Applications using Intune. This policy lets administrators replace the default windows shell with a custom or lightweight shell. it improves performance by using system resources and is useful for devices that run a dedicated application. If the policy is disabled or […]

AC Anoop C Nair 8 min read
Intune

Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune

Key Takeaways In this post we are discussing about Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune. Microsoft has announced the general availability of Custom Compliance Settings for macOS in Microsoft Intune. The feature helps organizations strengthen security controls while supporting many types of macOS management scenarios. […]

AC Anoop C Nair 4 min read
Intune

Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune

Key Takeaways In this post we are discussing Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune. Microsoft Intune has received a new update that expands firmware management capabilities for Samsung Galaxy devices through Firmware Versionsintegration. This enhancement gives IT administrators more control over firmware and operating system updates, helping them […]

AC Anoop C Nair 4 min read
Intune

MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys

Key Takeaways Microsoft Intune 2607 introduces Windows Registry Data collection in Device Inventory, allowing IT admins to verify actual device configurations without relying on custom discovery or remediation scripts. Using the Properties Catalog, admins can collect registry information through Single Value, All Values Under a Key (Non-Recursive), or Same Value Across Subkeys. MS Intune Adds […]

AC Anoop C Nair 5 min read