Description of Restriction Settings (Windows)
The description of each restriction setting is given in the table below:
|
Settings |
Descriptions |
Windows Editions |
|||||
|
Home |
Pro |
Ent |
Edu |
Mob |
Mob/ Ent |
||
|
App Store |
|
|
|||||
|
Allow Shared User App Data |
Use this option to share application data between different users on the same device and with other instances of that app. |
-- |
|
|
|
-- |
-- |
|
Require Private Store Only |
Use this option to allow apps to be downloaded from a private store, and not from the public store, including a retail catalog. |
-- |
-- |
|
|
-- |
-- |
|
Disable Store Originated App |
Use this option to disable all apps that were pre-installed on the device or downloaded from the Microsoft store. |
-- |
-- |
|
|
-- |
-- |
|
Restrict App Data To System Volume |
Use this option to block all applications from storing data on the System Volume. |
-- |
|
|
|
-- |
-- |
|
Restrict App To System Volume |
Use this option to block the applications from installing on the System Volume. |
-- |
|
|
|
-- |
-- |
|
Allow Game DVR |
Use this option to allow Windows game DVR (Digital Video Recorder) and broadcasting. |
-- |
|
|
|
-- |
-- |
|
Enable App Install Control |
Select an option from the dropdown menu to control users from downloading an application from an external site other than the store.
|
-- |
|
|
|
-- |
-- |
|
Allow User Control Over MSI Install |
Use this option to allow users to change the installation options typically reserved for system administrators. |
-- |
|
|
|
-- |
-- |
|
Allow Elevated User Control Over MSI Install |
Use this option to allow the Windows installer to use elevated permissions when it installs any program on the system. |
-- |
|
|
|
-- |
-- |
|
Launch App After LogOn |
Enter a list of apps to open after a user signs in to the device. Ensure to use a semi-colon delimited list of Package Family Names (PFN) of Windows applications. |
-- |
|
|
|
-- |
-- |
|
General Settings |
|
|
|||||
|
Camera |
Allow use of camera - Use this option to allow or deny users from accessing the camera. |
-- |
|
|
|
|
|
|
System |
Allow use of storage card - Use this option to allow or deny users from using storage cards. |
-- |
|
|
|
|
|
|
Allow the user to factory reset the phone – Use this option to allow or deny users from factory resetting the phone. |
-- |
-- |
-- |
-- |
|
|
|
|
Allow Windows Store - Use this option to allow or deny the users from using the Windows store. |
-- |
-- |
-- |
-- |
|
|
|
|
Allow automatic update of apps from Windows Store – Use this option to allow or deny the users from automatically updating the applications from Windows store. |
-- |
|
|
|
|
|
|
|
Location |
Use this option to allow or restrict the users from turning on location services on the device. Select an option from the dropdown menu.
|
|
|
|
|
|
|
|
Use developer features |
Select a developer feature from the dropdown menu:
|
|
|
|
|
|
|
|
Desktop Screen Image Url |
Enter the Image URL (in jpg/jpeg/png) to set an image as a desktop screen. |
|
|
|
|
|
|
|
Disable One Drive Sync |
Use this option to block the users from synchronizing files to OneDrive from the device. |
-- |
|
|
|
-- |
-- |
|
Internet Sharing |
Use this option to allow or deny the users from sharing the internet connection. |
-- |
|
|
|
-- |
-- |
|
Add Provision |
Use this option to allow the run time configuration agent that installs provisioning packages on the device. |
-- |
|
|
|
-- |
-- |
|
Remove Provision |
Use this option to allow the run time configuration agent that removes provisioning packages on the device. |
-- |
|
|
|
-- |
-- |
|
Direct Memory |
Use this option to block the direct memory access (DMA) for all hot pluggable PCI downstream ports until a user signs into Windows. |
-- |
|
|
|
-- |
-- |
|
USB Connection |
Use this option to allow or deny the users from using the USB between device and computer. |
|
|
|
|
|
|
|
End Task |
Use this option to allow or deny the non-administrators from using task managers to end tasks. |
-- |
|
|
|
-- |
-- |
|
Autopilot Reset |
Use this option to allow admins to delete all user data and settings using CTRL + Win + R at the device lock screen to automatically reconfigure and re-enroll into management. |
-- |
|
|
|
-- |
-- |
|
Turn Off File History |
Use this option to turn off the file history from creating regular and automatic backups. |
-- |
|
|
|
-- |
-- |
|
Allow Commercial Data Pipeline |
Use this option to allow or deny the data collected from the device will be opted into the Windows enterprise data pipeline. |
-- |
|
|
|
-- |
-- |
|
Block Non Admin Users Install |
Use this option to allow or deny the non -admin users from installing packaged Windows apps |
-- |
-- |
|
|
-- |
-- |
|
Allow Graphing Calculator |
Use this option to allow or deny the users from controlling graphic functionality in the Windows Calculator app. |
-- |
|
|
|
-- |
-- |
|
Allow Windows Ink Workspace |
Use this option to allow or deny the users from accessing the Windows ink workspace. Select an option from the dropdown menu.
|
-- |
|
|
|
-- |
-- |
|
Experience |
Allow Cortana – Use this option to allow or deny the users from using Cortana voice assistant on the device. |
-- |
|
|
|
|
|
|
Allow device discovery – Use this option to allow or deny network discovery of the device. |
-- |
|
|
|
|
|
|
|
Allow manual MDM unenrollment – Use this option to allow or deny the users from manually unenroll the devices from SureMDM. |
-- |
|
|
|
|
|
|
|
Allow copy and paste – Use this option to allow or deny the users from using copy-and-paste data on the device. |
-- |
-- |
-- |
-- |
|
|
|
|
Allow screen capture – Use this option to allow or deny the users from using screen capture on their devices. |
-- |
-- |
-- |
-- |
|
|
|
|
Display dialog prompt when no SIM card is detected – Use this option to allow or deny the device from displaying the dialog prompt on the screen when no SIM card is detected. |
-- |
-- |
-- |
-- |
|
|
|
|
Allow task switching on the device – Use this option to allow or deny the users from task switching on the device. |
-- |
-- |
-- |
-- |
|
|
|
|
Allow voice recording – Use this option to allow or deny the users from using voice recording on their devices. |
-- |
-- |
-- |
-- |
|
|
|
|
Show lock on user tile – Use this option to show or hide the lock on the user tile menu. |
-- |
-- |
|
|
-- |
-- |
|
|
Turn off cloud optimized content - Use this option to allow or deny the users from turning off the cloud optimized content. |
-- |
-- |
|
|
-- |
-- |
|
|
Spotlight |
|
|
|||||
|
Allow Windows Spotlight |
Use this option to allow or deny the users from turning on all Windows spotlight features at once. |
-- |
-- |
|
|
-- |
-- |
|
Allow Third Party Suggestions In Spotlight |
Use this option to allow the app and content suggestions from third-party software publishers. |
-- |
|
|
|
-- |
-- |
|
Allow Windows Consumer Features |
Use this option to allow or deny the users from turning on/off the experiences that are typically for consumers only. |
-- |
-- |
|
|
-- |
-- |
|
Allow Windows Tips |
Use this option to allow or deny the Windows tips. |
-- |
-- |
|
|
-- |
-- |
|
Allow Windows Spotlight On Action Center |
Use this option to allow or deny the Windows spotlight notifications in the Action Center. |
-- |
-- |
|
|
-- |
-- |
|
Allow Windows Spotlight in Windows Welcome Experience |
Use this option to allow or deny the users from turning on the Windows spotlight welcome experience feature. |
-- |
-- |
|
|
-- |
-- |
|
Allow Suggested Apps In Windows Ink Workspace |
Use this option to allow or deny the suggested apps in Windows ink workspace. |
-- |
|
|
|
-- |
-- |
|
Configure Windows Spotlight On LockScreen |
Use this option to allow or deny the users from configuring the Windows spotlight on the device’s lock screen. |
-- |
-- |
|
|
-- |
-- |
|
Locked Screen |
|
|
|||||
|
Allow Action Center Notifications |
Use this option to allow or deny the action center notifications on the device lock screen. |
-- |
-- |
-- |
-- |
|
-- |
|
Lock Screen Image Url |
Enter the path of the folder that contains the lock screen image (in jpg/jpeg/png). |
|
|
|
|
|
|
|
Allow Screen Timeout While Locked User Config |
Use this option to allow or deny users from configuring screen timeout while on the lock screen. |
-- |
-- |
-- |
-- |
|
-- |
|
Allow Cortana Above Lock |
Use this option to allow or deny the users from interacting with Cortana when the device is locked. |
-- |
|
|
|
-- |
-- |
|
Allow Toasts |
Use this option to allow the users from showing toast notifications on the device lock screen. |
|
|
|
|
|
|
|
Screen Timeout While Locked |
Use this option to set the duration (in seconds) for the screen timeout while on the lock screen. |
|
|
|
|
|
|
|
Let Apps Activate With Voice Above Lock |
Select an option from the dropdown menu to specify the apps that can be activated by voice while the device is locked .
|
|
|
|
|
|
|
|
Projection |
|
|
|||||
|
Allow User Input From Wireless Display Receiver |
Use this option to allow or deny the user input from wireless display receivers. |
-- |
|
|
|
-- |
-- |
|
Allow Projection To PC |
Use this option to allow or deny the users from turning on the projection to the PC. |
-- |
|
|
|
-- |
-- |
|
Require Pin For Pairing |
Use this option to allow the requirement for a PIN for pairing. |
-- |
|
|
|
-- |
-- |
|
Telemetry and Reporting |
|
|
|||||
|
Allow Telemetry |
Use this option to allow or deny the device from sending diagnostic and usage telemetry data, such as Watson. Select an option from the dropdown menu.
|
-- |
|
|
|
-- |
-- |
|
Configure Telemetry For Microsoft 365 Analytics |
Select an option from the following to block the Microsoft Edge from sending the browsing history to Microsoft 365 Analytics.
|
-- |
|
|
|
-- |
-- |
|
Telemetry Proxy |
Enter the fully qualified domain name (FQDN) or IP address of a proxy server to forward connected user experiences and telemetry requests. The format for the setting is <server>:<port>. |
-- |
|
|
|
-- |
-- |
|
Defender Smart Screen |
|
|
|||||
|
Allow Smart Screen |
Use this option to allow or deny the users from turning on/off Microsoft Defender SmartScreen, and prevent users from turning it off. |
-- |
|
|
|
-- |
-- |
|
Prevent Smart Screen Prompt Override |
Use this option to allow or deny the users from bypassing the warnings, blocking them from continuing to the site. |
-- |
|
|
|
-- |
-- |
|
Prevent Smart Screen Prompt Override For Files |
Use this option to allow users from bypassing the warnings, blocking them from downloading the unverified files. |
-- |
|
|
|
-- |
-- |
|
Search |
|
|
|||||
|
Safe Search Permissions |
Select an option from the dropdown menu to specify the level of safe search.
|
-- |
-- |
-- |
-- |
|
-- |
|
Do Not Use Web Results |
Use this option to allow or deny the search to perform queries on the web. |
-- |
|
|
|
-- |
-- |
|
Allow Using Diacritics |
Use this option to allow or deny the users from using diacritics. |
-- |
|
|
|
-- |
-- |
|
Always Use Auto Lang Detection |
Use this option to allow automatic language detection when indexing content or properties. |
-- |
|
|
|
-- |
-- |
|
Allow Search To Use Location |
Use this option to allow the search to control the location information. |
-- |
|
|
|
-- |
-- |
|
Disable Backoff |
When this option is disabled backoff logic will be used to throttle back indexing activity when system activity is high. |
-- |
|
|
|
-- |
-- |
|
Disable Removable Drive Indexing |
Use this option to allow or deny the users from adding the locations on the removable drives to the libraries. |
-- |
|
|
|
-- |
-- |
|
Prevent Indexing Low Disk Space MB |
Use this option to prevent indexing from continuing after less than the specified amount of hard drive space is left on the same drive as the index location. |
-- |
|
|
|
-- |
-- |
|
Prevent Remote Queries |
Use this option to allow or deny the users to query this computer’s index remotely. |
-- |
|
|
|
-- |
-- |
|
Power Settings |
|
|
|||||
|
Energy Saver Battery Threshold On Battery |
Enter the battery charging value (in percentage) at which energy saving option will be turned on. Provide values between 1- 100. |
-- |
|
|
|
-- |
-- |
|
Select Lid Close Action On Battery |
Select an option from the dropdown menu to specify the action that Windows will perform when a user closes the lid on a mobile PC.
|
-- |
|
|
|
-- |
-- |
|
Select Power Button Action On Battery |
Select an option from the dropdown menu to specify the action that the device will perform when a user presses the Power button.
|
-- |
|
|
|
-- |
-- |
|
Select Sleep Button Action On Battery |
Select an option from the dropdown menu to specify the action that the device will perform when a user presses the Sleep button.
|
-- |
|
|
|
-- |
-- |
|
Turn Off Hybrid Sleep On Battery |
Select an option from the dropdown menu to allow or deny the users from turning off the Hybrid Sleep.
|
-- |
|
|
|
-- |
-- |
|
Energy Saver Battery Threshold Plugged In |
Enter the battery charging level at which energy saving option will be turned on when plugged in. Provide values between 1- 100. |
-- |
|
|
|
-- |
-- |
|
Select Lid Close Action Plugged In |
Select an action from the following that the device will perform when a user closes the lid on a mobile PC when plugged in.
|
-- |
|
|
|
-- |
-- |
|
Select Power Button Action Plugged In |
Select an action from the following that the device will perform when the user presses the Power button when plugged in.
|
-- |
|
|
|
-- |
-- |
|
Select Sleep Button Action Plugged In |
Select an option from the following that device will perform when a user presses the Sleep button when plugged in.
|
-- |
|
|
|
-- |
-- |
|
Turn Off Hybrid Sleep Plugged In |
Select an option from the following to allow or deny the users from turning off the Hybrid Sleep when plugged in.
|
-- |
|
|
|
-- |
-- |
|
Unattended Sleep Timeout On Battery |
Enter the time (in seconds) to specify the period of inactivity before Windows transitions to sleep automatically when a user is not present at the computer. |
-- |
|
|
|
-- |
-- |
|
Unattended Sleep Timeout Plugged In |
Enter the time (in seconds) to specify the period of inactivity before Windows transitions to sleep automatically when a user is not present at the computer when plugged in. |
-- |
|
|
|
-- |
-- |
|
Privacy |
|
|
|||||
|
Disable Privacy Experience |
Use this option to disable the privacy experience from launching during the user logon for new and upgraded users. |
|
|
|
|
-- |
-- |
|
Allow Input Personalization |
Use this option to allow the users to enable online speech recognition. |
|
|
|
|
-- |
-- |
|
Allow Auto Accept Pairing And Privacy Consent Prompts |
Use this option to allow or deny the users from automatically accepting the pairing and privacy user consent dialog when launching apps. |
|
|
|
|
-- |
-- |
|
Publish User Activities |
Use this option to allow publishing of user activities to the activity feed. |
|
|
|
|
-- |
-- |
|
Enable Activity Feed |
Use this option to allow the Apps/OS to publish to the activity feed. |
|
|
|
|
-- |
-- |
|
Let Apps Access Account Info |
Select an option from the dropdown menu to allow the Windows apps to access account information.
|
|
|
|
|
-- |
-- |
|
Let Apps Run In Background |
Select an option from the dropdown menu to allow the Windows apps to run in background.
|
|
|
|
|
-- |
-- |
|
Let Apps Access Calendar |
Select an option from the dropdown to allow the Windows apps to access the calendar.
|
|
|
|
|
-- |
-- |
|
Let Apps Access Call History |
Select an option from the dropdown menu to allow the Windows apps to access the call history.
|
|
|
|
|
-- |
-- |
|
Let Apps Access Camera - |
Select an option from the dropdown menu to allow the device apps to access the camera.
|
|
|
|
|
-- |
-- |
|
Let Apps Access Contacts |
Select an option from the dropdown menu to allow the Windowsapps to access the Contacts.
|
|
|
|
|
-- |
-- |
|
Let Apps Access Email |
Select an option from the dropdown menu to allow the Windows apps to access the email.
|
|
|
|
|
-- |
-- |
|
Let Apps Access Location |
Select an option from the dropdown menu to allow the Windows apps to access the location.
|
|
|
|
|
-- |
-- |
|
Let Apps Access Messaging |
Select an option from the dropdown menu to allow the Windows apps to access the messages.
|
|
|
|
|
-- |
-- |
|
Let Apps Access Microphone |
Select an option from the dropdown menu to allow the device apps to access the microphone.
|
|
|
|
|
-- |
-- |
|
Let Apps Access Motion |
Select an option from the dropdown menu to allow the Windowsapps to access motion data.
|
|
|
|
|
-- |
-- |
|
Let Apps Access Notifications |
Select an option from the dropdown menu to allow the Windows apps to access the notification.
|
|
|
|
|
-- |
-- |
|
Let Apps Access Phone |
Select an option from the dropdown menu to allow the Windows apps to make the phone calls.
|
|
|
|
|
-- |
-- |
|
Let Apps Access Radios |
Select an option from the dropdown menu to allow the Windows apps to access the radio.
|
|
|
|
|
-- |
-- |
|
Let Apps Access Tasks |
Select an option from the dropdown menu to allow the Windows apps to access the task.
|
|
|
|
|
-- |
-- |
|
Let Apps Access Trusted Devices |
Select an option from the dropdown menu to allow the device apps to access the Trusted Devices.
|
|
|
|
|
-- |
-- |
|
Let Apps Get Diagnostic Info |
Select an option from the following to allow the Windows apps to get diagnostics info about other running devices.
|
|
|
|
|
-- |
-- |
|
Let Apps Sync With Devices |
Select an option from the dropdown menu to allow the Windows apps to sync with devices.
|
|
|
|
|
-- |
-- |
|
Let Apps Activate With Voice |
Select an option from the dropdown menu to allow the Windows apps to be activated by voice.
|
|
|
|
|
-- |
-- |
|
Cellular and Connectivity |
|
|
|||||
|
Allow Cellular |
Select an option from the dropdown menu to activate cellular data on the device.
|
-- |
|
|
|
-- |
-- |
|
Allow Cellular Data Roaming |
Select an option from the dropdown menu to activate cellular data roaming on the device.
|
-- |
|
|
|
-- |
-- |
|
Allow VPN Over Cellular |
Use this option to allow or deny the users from accessing the VPN connection when connected to a cellular network. |
-- |
|
|
|
-- |
-- |
|
Allow VPN Roaming Over Cellular |
Use this option to allow or deny the users from connecting to VPN when roaming on cellular networks. |
-- |
|
|
|
-- |
-- |
|
Allow Connected Devices |
Use this option to disable Connected Devices Platform (CDP) components. |
-- |
|
|
|
-- |
-- |
|
Allow NFC |
Use this option to allow or deny the users from using the Near Field Communication (NFC) on the device. |
-- |
|
|
|
-- |
-- |
|
Allow WiFi |
Use this option to allow or deny the users from using Wi-Fi connections on the device. |
-- |
|
|
|
-- |
-- |
|
Allow Auto Connect To WiFi Sense Hotspots |
Use this option to allow or deny the users from automatically connecting to the Wi-Fi hotspots. |
-- |
|
|
|
-- |
-- |
|
Allow Manual WiFi Configuration |
Use this option to allow or deny the users from connecting to Wi-Fi outside of MDM server-installed networks. |
-- |
|
|
|
-- |
-- |
|
WLAN Scan Mode |
Enter a value (1 – 500 Seconds) at which the devices will scan for Wi-Fi networks. |
-- |
|
|
|
-- |
-- |
|
Allow Bluetooth |
Select an option from the dropdown menu to allow or restrict Bluetooth on the device.
|
-- |
|
|
|
-- |
-- |
|
Allow Preparing |
Use this option to allow or deny the specific bundled Bluetooth peripherals to automatically pair with the host device. |
-- |
|
|
|
-- |
-- |
|
Allow Advertising |
Use this option to allow or deny the device from sending out the Bluetooth advertisements. |
-- |
|
|
|
-- |
-- |
|
Allow Prompted Proximal Connections |
Use this option to allow or deny the users on the managed devices from using swift pair and other proximity-based scenarios. |
-- |
|
|
|
-- |
-- |
|
Services Allowed List |
Use this option to set a list of allowable services and profiles. |
-- |
|
|
|
-- |
-- |
|
Set Minimum Encryption Key Size |
Enter a value between 1 – 16 (in bytes) to set a minimum encryption key size. |
-- |
|
|
|
-- |
-- |
|
Per App Privacy Exception |
Add apps that should have a different privacy behaviour from what you have defined in "Default privacy". Click Add to add a Row.
Exceptions
|
|
|
|
|
|
|
|
Start |
|
|
|||||
|
Start Layout |
Use this option to Import a file to override the default start layout and prevent the user from changing it. |
|
|
|
|
|
|
|
Import Edge Assets |
Use this option to import Edge assets (e.g. .png/.jpg files) for secondary tiles into its local app data path that allows the start layout policy to pin edge secondary tiles as weblink that tie to the image asset files. |
|
|
|
|
|
|
|
No Pinning To Taskbar |
Use this option to allow or deny the users from pinning and unpinning the apps on the taskbar. |
-- |
|
|
|
-- |
-- |
|
Hide People Bar |
Use this option to allow or hide people icons from the taskbar as well as the corresponding setting toggle. |
-- |
|
|
|
-- |
-- |
|
Hide Frequently Used Apps |
Use this option to allow or hide the frequently used apps at the start. |
-- |
|
|
|
-- |
-- |
|
Hide Recently Added Apps |
Use this option to allow or hide the recently added apps at the start. |
-- |
|
|
|
-- |
-- |
|
Force Start Size |
Select an option from the following to set the start screen size.
|
-- |
|
|
|
-- |
-- |
|
Hide Recent Jump lists |
Use this option to allow or hide the recently opened apps appearing in the jump list. |
-- |
|
|
|
-- |
-- |
|
Hide App List |
Select an option from the following to hide the apps list.
|
-- |
|
|
|
-- |
-- |
|
Hide Power Button |
Use this option to allow or hide the power menu appearing at the start. |
-- |
|
|
|
-- |
-- |
|
Hide User Tile |
Use this option to allow or hide the user tile appearing at the start. |
-- |
|
|
|
-- |
-- |
|
Hide Lock |
Use this option to allow or hide the lock option appearing at the start. |
-- |
|
|
|
-- |
-- |
|
Hide Sign Out |
Use this option to allow or hide the sign out option appearing in the user tile. |
-- |
|
|
|
-- |
-- |
|
Hide ShutDown |
Use this option to allow or hide shutdown and update and shutdown options appearing in the power menu. |
-- |
|
|
|
-- |
-- |
|
Hide Sleep |
Use this option to allow or hide the sleep option appearing in the power menu. |
-- |
|
|
|
-- |
-- |
|
Hide Hibernate |
Use this option to allow or hide the hibernate option appearing in the power menu. |
-- |
|
|
|
-- |
-- |
|
Hide Switch Account |
Use this option to allow or hide the switch account option in the user tile. |
-- |
|
|
|
-- |
-- |
|
Hide Restart |
Use this option to allow or hide the restart option appearing in the power menu. |
-- |
|
|
|
-- |
-- |
|
Allow Pinned Folder Documents |
Select an option from the following to control the visibility of the documents shortcut in the Start menu.
|
-- |
|
|
|
-- |
-- |
|
Allow Pinned Folder File Explorer |
Select an option from the following to control the visibility of the file explorer shortcut in the Start menu.
|
-- |
|
|
|
-- |
-- |
|
Allow Pinned Folder Home Group |
Select an option from the following to control the visibility of the home group shortcut in the Start menu.
|
-- |
|
|
|
-- |
-- |
|
Allow Pinned Folder Music |
Select an option from the following to control the visibility of the music shortcut in the Start menu.
|
-- |
|
|
|
-- |
-- |
|
Allow Pinned Folder Network |
Select an option from the following to control the visibility of the network shortcut in the Start menu.
|
-- |
|
|
|
-- |
-- |
|
Allow Pinned Folder Personal Folder |
Select an option from the following to control the visibility of the personal folder shortcut in the Start menu.
|
-- |
|
|
|
-- |
-- |
|
Allow Pinned Folder Pictures |
Select an option from the following to control the visibility of the pictures shortcut in the Start menu.
|
-- |
|
|
|
-- |
-- |
|
Allow Pinned Folder Settings |
Select an option from the following to control the visibility of the settings shortcut in the Start menu.
|
-- |
|
|
|
-- |
-- |
|
Allow Pinned Folder Videos - |
Select an option from the following to control the visibility of the videos shortcut in the Start menu.
|
-- |
|
|
|
-- |
-- |
|
Network Proxy |
|
|
|||||
|
Auto Detect |
Use this option to allow or deny the devices from automatically detecting a Proxy Auto Config (PAC) script. |
-- |
|
|
|
-- |
-- |
|
Use Proxy Script |
Use this option to enable auto Proxy Script.
|
|
|
|
|
|
|
|
Use Manual Proxy Script |
Use this option to enable manual proxy script.
|
|
|
|
|
|
|
|
Cloud and Storage |
|
|
|||||
|
Allow Microsoft Account Connection |
Use this option to allow or deny the users from using an MSA account for non-email related connection authentication and services. |
-- |
|
|
|
|
|
|
Allow Adding Non Microsoft Accounts Manually |
Use this option to allow or deny the users from adding non-MSA email accounts. |
-- |
|
|
|
|
|
|
Allow Sync My Settings |
Use this option to allow or deny Windows sync settings on the device. |
-- |
|
|
|
|
|
|
Allow Microsoft Account Sign In Assistant |
Use this option to allow or deny the users from signing in to their Microsoft account. |
-- |
|
|
|
|
|
|
Cloud Printer |
|
|
|||||
|
Cloud Printer Discovery EndPoint |
Enter the URL to specify the per-user endpoint for discovering cloud printers. |
-- |
|
|
|
-- |
-- |
|
Cloud Print OAuth Authority |
Enter the URL to specify the authentication endpoint for acquiring OAuth tokens. |
-- |
|
|
|
-- |
-- |
|
Cloud Print OAuth Client Id |
Enter the GUID of a client application authorized to retrieve OAuth tokens from the OAuth authority. |
-- |
|
|
|
-- |
-- |
|
Cloud Print Resource Id |
Enter the per-user resource URL for which access is requested by the enterprise cloud print client during OAuth authentication. |
-- |
|
|
|
-- |
-- |
|
Discovery Max Printer Limit |
Enter the maximum number of printers that should be queried from a discovery end point. |
-- |
-- |
-- |
-- |
|
|
|
Mopria Discovery Resource Id |
Enter the per-user resource URL for which access is requested by the Mopria discovery client during OAuth authentication. |
-- |
|
|
|
-- |
-- |
|
Printer |
|
|
|||||
|
Printer Names |
Enter the network host names to set the provision printers based on their names. |
-- |
|
|
|
-- |
-- |
|
Default Printer Name |
Enter the network host name to set the user's default printer. |
-- |
|
|
|
-- |
-- |
|
Prevent Adding New Printers |
Use this option to allow or deny the users from preventing the installation of additional printers from the printer settings. |
-- |
|
|
|
-- |
-- |
|
Messaging |
|
|
|||||
|
Allow Message Sync |
Use this option to backup text messages and restore the messages. |
-- |
|
|
|
-- |
-- |
|
Allow MMS |
Use this option to allow or deny the users from using the Multimedia Message Service (MMS). |
-- |
-- |
-- |
-- |
|
|
|
Block RCS |
Use this option to allow or deny the Rich Communication Service. |
-- |
-- |
-- |
-- |
|
|
|
Display |
|
|
|||||
|
Turn On Gdi DPI Scaling For Apps |
Enter the legacy apps for which GDI DPI scaling will be turned on. |
-- |
|
|
|
-- |
-- |
|
Turn Off Gdi DPI Scaling For Apps |
Enter the apps for which GDI DPI scaling will be turned off. |
-- |
|
|
|
-- |
-- |
|
Control Panel and Settings |
|
|
|||||
|
Settings App |
Use this option to allow or deny the users from accessing the device Settings app. |
-- |
|
|
|
-- |
-- |
|
Allow System |
Use this option to allow or deny the users from accessing the System section of the Settings app. |
-- |
|
|
|
-- |
-- |
|
Allow Power and Sleep Modification |
Use this option to allow or deny the users from modifying Power and Sleep settings. |
-- |
|
|
|
-- |
-- |
|
Allow Devices |
Use this option to allow or deny the users from accessing the Device section of the Settings app. |
-- |
|
|
|
-- |
-- |
|
Allow Network and Internet |
Use this option to allow or deny the users from accessing the Network & Internet section of the Settings app. |
-- |
|
|
|
-- |
-- |
|
Allow Personalization |
Use this option to allow or deny the users from accessing the Personalization section of the Settings app. |
-- |
|
|
|
-- |
-- |
|
Allow Apps |
Use this option to allow or deny the users from accessing the Apps section of the Settings app. |
-- |
|
|
|
-- |
-- |
|
Allow Accounts |
Use this option to allow or deny the users from accessing the Accounts area of the Settings app. |
-- |
|
|
|
-- |
-- |
|
Allow Time and Language |
Use this option to allow or deny the users from accessing the Time & Language section of the Settings app. |
-- |
|
|
|
-- |
-- |
|
Allow Date Time |
Use this option to allow or deny the users from accessing the Date and Time settings. |
-- |
|
|
|
-- |
-- |
|
Allow Region |
Use this option to allow or deny the users from accessing Region settings. |
-- |
|
|
|
-- |
-- |
|
Allow Language |
Use this option to allow or deny the users from accessing the Language settings. |
-- |
|
|
|
-- |
-- |
|
Allow Gaming |
Use this option to allow or deny the users from accessing the Gaming section area of the Settings app. |
-- |
|
|
|
-- |
-- |
|
Allow Ease of Access |
Use this option to allow or deny the users from using the Ease of Access of the Settings app. |
-- |
|
|
|
-- |
-- |
|
Allow Privacy |
Use this option to allow or deny the users from accessing the Privacy section of the Settings app. |
-- |
|
|
|
-- |
-- |
|
Allow Update and Security |
Use this option to allow or deny the users from accessing the Update & Security section of the Settings app. |
-- |
|
|
|
-- |
-- |
|
Allow Cortana |
Use this option to allow or deny the users from using Cortana voice assistant. |
-- |
|
|
|
-- |
-- |
|
Allow Search |
Use this option to allow or deny the users from accessing the Search section of the Settings app. |
-- |
|
|
|
-- |
-- |
|
Microsoft Edge Browser (Supported on version 45 and earlier) |
|
|
|||||
|
Start experience |
Start Microsoft Edge with – Choose a page from the following that opens when Microsoft Edge is launched.
|
-- |
|
|
|
-- |
-- |
|
Custom Start pages – Enter the URL to set a custom start page when Microsoft Edge is launched. |
-- |
|
|
|
-- |
-- |
|
|
Allow user to change Start pages – Use this option to allow or deny the users from changing the start pages of Microsoft Edge. |
-- |
|
|
|
-- |
-- |
|
|
Allow web content on new Tab page Use this option to allow or deny the Microsoft Edge to load the default new tab page and let the users make changes. |
-- |
|
|
|
-- |
-- |
|
|
New Tab URL – Enter the URL to open on a new tab page. |
-- |
|
|
|
-- |
-- |
|
|
Home Button – Select an option from the following that opens when the home button is clicked.
|
-- |
|
|
|
-- |
-- |
|
|
Allow Users to change Home button Use this option to allow or deny the users from modifying the home page. |
-- |
|
|
|
-- |
-- |
|
|
Allow pop-ups – Use this option to allow or deny the pop-ups on the web browser. |
-- |
|
|
|
-- |
-- |
|
|
Send intranet traffic to Internet Explorer – Use this option to allow or deny the users from opening intranet sites in Internet Explorer instead of Microsoft Edge. |
|
|
|
|
-- |
-- |
|
|
Enterprise mode site list location – Enter the URL that points to the XML file containing a list of websites that opens in enterprise mode. |
|
|
|
|
-- |
-- |
|
|
Message when opening sites – Select an option from the following to configure Microsoft Edge to show a notification before a site opens in Internet Explorer 11.
|
|
|
|
|
-- |
-- |
|
|
Allow Microsoft compatibility list – Use this option to allow or deny the users from using Microsoft Compatibility List. |
-- |
|
|
|
-- |
-- |
|
|
Preload Start pages and new Tab page – Use this option to allow or deny the Microsoft Edge to preload the start page and new tab pages. |
-- |
|
|
|
-- |
-- |
|
|
Prelaunch Start pages and new Tab page – Use this option to allow or deny the Microsoft Edge to pre launch the start page and new tab page. |
-- |
|
|
|
-- |
-- |
|
|
Favorites and search |
Show Favorites bar – Use this option to allow or deny the users from using the favorite bar. |
-- |
|
|
|
-- |
-- |
|
Allow changes to favorites – Use this option to allow or deny the users from changing the favorites. |
-- |
|
|
|
-- |
-- |
|
|
Favorites List – Enter the list of URLs to the favorite files. |
-- |
|
|
|
-- |
-- |
|
|
Sync favorites between Microsoft browsers - Use this option to allow or deny the users from synchronizing the favorites between Microsoft Edge and Internet Explorer. |
-- |
|
|
|
-- |
-- |
|
|
Default search engine - Select an option from the following to set a default search engine.
|
-- |
|
|
|
-- |
-- |
|
|
Show search suggestions - Use this option to allow or deny the search engines from suggesting search phrases in the address bar. |
-- |
|
|
|
-- |
-- |
|
|
Privacy and security |
Allow InPrivate browsing – Use this option to allow or deny the users from using InPrivate browsing. |
-- |
|
|
|
-- |
-- |
|
Save browsing history – Use this option to allow or deny saving the browsing history on the Microsoft Edge. |
-- |
|
|
|
-- |
-- |
|
|
Clear browsing data on exit – Use this option to allow or deny the users from clearing all the browsing data when exiting Microsoft Edge. |
-- |
|
|
|
-- |
-- |
|
|
Sync browser settings between user's devices – Select an option from the dropdown menu to sync the browser settings between user’s devices.
|
-- |
-- |
|
|
-- |
-- |
|
|
Allow Password Manager - Use this option to allow or deny Microsoft Edge from saving and managing passwords in the devices. |
-- |
|
|
|
-- |
-- |
|
|
Cookies - Select an option from the following to specify the cookies settings.
|
-- |
|
|
|
-- |
-- |
|
|
Allow Autofill in forms - Use this option to allow or deny autofill to populate form fields automatically. |
-- |
|
|
|
-- |
-- |
|
|
Send do-not-track headers - Enable this option to send don-not-track headers to websites requesting for tracking info. |
-- |
|
|
|
-- |
-- |
|
|
Show WebRTC localhost IP address - Use this option to show the user’s localhost IP address when making phone calls. |
-- |
|
|
|
-- |
-- |
|
|
Allow live tile data collection - Use this option to allow or deny Microsoft Edge from collecting live tile metadata. |
-- |
|
|
|
-- |
-- |
|
|
User can override certificate errors Use this option to allow or deny the users from accessing the websites with SSL or TLS errors. |
-- |
|
|
|
-- |
-- |
|
|
Additional |
Allow address bar dropdown – Use this option to allow or deny the users from using address bar dropdown in Microsoft Edge. |
-- |
|
|
|
-- |
-- |
|
Allow full screen mode – Use this option to allow or deny users from using full screen mode in Microsoft Edge. |
-- |
|
|
|
-- |
-- |
|
|
Allow printing - Use this option to allow or deny users from printing the web content. |
-- |
|
|
|
-- |
-- |
|
|
Allow about flags page - Use this option to allow or deny the user from accessing about:flag page to change developer settings and enable experimental features. |
-- |
|
|
|
-- |
-- |
|
|
Allow developer tools – Use this option to allow or deny the users from accessing the developer tools in Microsoft Edge. |
-- |
|
|
|
-- |
-- |
|
|
User can install extensions - Use this option to allow or deny the users from installing the new extensions on the devices. |
-- |
|
|
|
-- |
-- |
|
|
Allow sideloading of developer extensions - Use this option to allow or deny the users from accessing the sideload extensions in Microsoft Edge. |
-- |
|
|
|
-- |
-- |
|
|
Required extensions - Enter the extensions that cannot be turned off by the users. |
-- |
|
|
|
-- |
-- |
|
