For IT administrators
Policy generator
The shipped defaults are the recommendation. Pick a preset, set the few values most sites change, and copy the result.
Outputs: a PowerShell script that writes the values into a GPO, a .reg file for one test machine, and a table for setting the same values by hand in the Group Policy Management Editor. Only values that differ from the defaults, or that the preset sets, are included. This page runs entirely in your browser and sends nothing anywhere. Background: RECOMMENDED-POLICY.md.
Result
Run on a machine with the Group Policy Management tools. Review it first.
For one test machine. On a domain-joined machine a Group Policy refresh can replace or remove these values.
In the Group Policy Management Editor, open each policy and set it as shown.