diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md
index 7b0b676166..67aad1cf77 100644
--- a/windows/client-management/mdm/TOC.md
+++ b/windows/client-management/mdm/TOC.md
@@ -168,7 +168,6 @@
#### [Policies supported by Windows 10 IoT Core](policies-supported-by-iot-core.md)
#### [Policies supported by Microsoft Surface Hub](policies-supported-by-surface-hub.md)
#### [Policies that can be set using Exchange Active Sync (EAS)](policies-that-can-be-set-using-eas.md)
-#### [ApplicationRestrictions XSD](applicationrestrictions-xsd.md)
#### [AboveLock](policy-csp-abovelock.md)
#### [Accounts](policy-csp-accounts.md)
#### [ActiveXControls](policy-csp-activexcontrols.md)
diff --git a/windows/client-management/mdm/policies-that-can-be-set-using-eas.md b/windows/client-management/mdm/policies-that-can-be-set-using-eas.md
index f7f50cd529..3c0303c2c0 100644
--- a/windows/client-management/mdm/policies-that-can-be-set-using-eas.md
+++ b/windows/client-management/mdm/policies-that-can-be-set-using-eas.md
@@ -14,12 +14,10 @@ ms.date: 07/18/2019
# Policies that can be set using Exchange Active Sync (EAS)
-- [Browser/AllowBrowser](policy-csp-browser.md#browser-allowbrowser)
- [Camera/AllowCamera](policy-csp-camera.md#camera-allowcamera)
- [Cellular/ShowAppCellularAccessUI](policy-csp-cellular.md#cellular-showappcellularaccessui)
- [Connectivity/AllowBluetooth](policy-csp-connectivity.md#connectivity-allowbluetooth)
- [Connectivity/AllowCellularDataRoaming](policy-csp-connectivity.md#connectivity-allowcellulardataroaming)
-- [Connectivity/AllowUSBConnection](policy-csp-connectivity.md#connectivity-allowusbconnection)
- [DeviceLock/AllowSimpleDevicePassword](policy-csp-devicelock.md#devicelock-allowsimpledevicepassword)
- [DeviceLock/AlphanumericDevicePasswordRequired](policy-csp-devicelock.md#devicelock-alphanumericdevicepasswordrequired)
- [DeviceLock/DevicePasswordEnabled](policy-csp-devicelock.md#devicelock-devicepasswordenabled)
diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md
index 43a1c393ed..d0d52bed09 100644
--- a/windows/client-management/mdm/policy-configuration-service-provider.md
+++ b/windows/client-management/mdm/policy-configuration-service-provider.md
@@ -827,6 +827,9 @@ The following diagram shows the Policy configuration service provider in tree fo
Connectivity/AllowPhonePCLinking
+
+ Connectivity/AllowUSBConnection
+
Connectivity/AllowVPNOverCellular
@@ -1213,7 +1216,7 @@ The following diagram shows the Policy configuration service provider in tree fo
-
- DeviceLock/AllowScreenTimeoutWhileLockedUserConfig
+ DeviceLock/AllowIdleReturnWithoutPassword
-
DeviceLock/AllowSimpleDevicePassword
diff --git a/windows/client-management/mdm/policy-csp-connectivity.md b/windows/client-management/mdm/policy-csp-connectivity.md
index 2f34558e42..9f039348ee 100644
--- a/windows/client-management/mdm/policy-csp-connectivity.md
+++ b/windows/client-management/mdm/policy-csp-connectivity.md
@@ -37,6 +37,9 @@ manager: dansimp
-
Connectivity/AllowPhonePCLinking
+ -
+ Connectivity/AllowUSBConnection
+
-
Connectivity/AllowVPNOverCellular
@@ -406,6 +409,71 @@ Device that has previously opt-in to MMX will also stop showing on the device li
+
+**Connectivity/AllowUSBConnection**
+
+
+
+
+ Windows Edition |
+ Supported? |
+
+
+ Home |
+  |
+
+
+ Pro |
+  |
+
+
+ Business |
+  |
+
+
+ Enterprise |
+  |
+
+
+ Education |
+  |
+
+
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+> [!NOTE]
+> Currently, this policy is supported only in HoloLens 2, Hololens (1st gen) Commercial Suite, and HoloLens (1st gen) Development Edition.
+
+Enables USB connection between the device and a computer to sync files with the device or to use developer tools to deploy or debug applications. Changing this policy does not affect USB charging.
+
+Both Media Transfer Protocol (MTP) and IP over USB are disabled when this policy is enforced.
+
+Most restricted value is 0.
+
+
+
+The following list shows the supported values:
+
+- 0 – Not allowed.
+- 1 (default) – Allowed.
+
+
+
+
+
+
**Connectivity/AllowVPNOverCellular**
diff --git a/windows/client-management/mdm/policy-csp-devicelock.md b/windows/client-management/mdm/policy-csp-devicelock.md
index c0fa8cb3c8..8d3fe92592 100644
--- a/windows/client-management/mdm/policy-csp-devicelock.md
+++ b/windows/client-management/mdm/policy-csp-devicelock.md
@@ -22,6 +22,9 @@ manager: dansimp
## DeviceLock policies
+ -
+ DeviceLock/AllowIdleReturnWithoutPassword
+
-
DeviceLock/AllowSimpleDevicePassword
@@ -64,6 +67,70 @@ manager: dansimp
+
+
+
+**DeviceLock/AllowIdleReturnWithoutPassword**
+
+
+
+
+ Windows Edition |
+ Supported? |
+
+
+ Home |
+  |
+
+
+ Pro |
+  |
+
+
+ Business |
+  |
+
+
+ Enterprise |
+  |
+
+
+ Education |
+  |
+
+
+
+
+
+
+
+[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+> [!div class = "checklist"]
+> * Device
+
+
+
+
+
+> [!NOTE]
+> Currently, this policy is supported only in HoloLens 2, Hololens (1st gen) Commercial Suite, and HoloLens (1st gen) Development Edition.
+
+Specifies whether the user must input a PIN or password when the device resumes from an idle state.
+
+> [!NOTE]
+> This policy must be wrapped in an Atomic command.
+
+
+
+The following list shows the supported values:
+
+- 0 – Not allowed.
+- 1 (default) – Allowed.
+
+
+
+