Apply settings for Windows 10 or 11 devices

Get a 64-bit or 32-bit installation file for GCPW for your organization. For instructions, see Install Google Credential Provider for Windows.

You can also copy and regenerate the GCPW token. For details, see Regenerate the GCPW token.

To allow users to sign in through GCPW, you must specify the allowed domains for users' Google accounts. Until you specify at least one domain, no users can sign in. For details, see Install Google Credential Provider for Windows.

To set up a test organizational unit differently from the rest of your organization:

1. Select the top organizational unit.
2. Check the Automatically update GCPW and Prevent updates after a specific version boxes, and enter the latest version you want people to use.
3. Click Save.
4. Select the organizational unit that contains users with test devices.
5. Check the Automatically update GCPW box and uncheck the Prevent updates after a specific version box.
6. Click Override.

To turn on Windows device management for your organization, select Enabled. You might want to wait to enable Windows device management until you configure any policies. For instructions, see Set up GCPW and Windows device management.

To turn off Windows device management, select Disabled.

Set the privileges users have on devices managed with Windows device management:

• To revoke admin privileges, select Standard User.
• To give users admin privileges, select Local Administrator.

You can also give administrative privileges on the device to Active Directory (AD) users, AD groups, or local users.

Note: If you don't enter any values, any existing local admin accounts are removed from devices. If User account type is set to Standard User, then no local admin account is available on devices. In this case, to take admin actions on the device you'll need to temporarily grant privileges to the user.

For details, see Set account permissions on Windows 10 or 11 devices.

Set how and when your organization’s Windows 10 or 11 devices receive security updates and other important downloads through the Windows automatic updating service.

For details, see Manage automatic updates for Windows 10 or 11 devices.

Set how Windows 10 or 11 devices and drives are encrypted.

For details, see Enable BitLocker encryption on a Windows 10 or 11 device.

Manage Windows settings and features that aren't available to set in the Google Admin console. You can also block and deploy apps.

Learn more:

• Understand custom settings for Windows 10 or 11 devices
• Add, edit, or delete custom settings for Windows 10 or 11 devices
• Common custom settings for Windows 10 or 11 devices
• Block apps on Windows 10 or 11 devices with custom settings
• Install apps on Windows 10 or 11 devices with custom settings