diff --git a/windows/manage/set-up-shared-or-guest-pc.md b/windows/manage/set-up-shared-or-guest-pc.md index 4ce2ba83d5..285a37fcb1 100644 --- a/windows/manage/set-up-shared-or-guest-pc.md +++ b/windows/manage/set-up-shared-or-guest-pc.md @@ -196,136 +196,75 @@ Shared PC mode sets local group policies to configure the device. Some of these
Policy name | Value | When set? |
-
---|---|---|
Policy name | Value | When set? |
Admin Templates > Control Panel > Personalization |
-||
Prevent enabling lock screen slide show | Enabled | Always |
-
Prevent changing lock screen and logon image | Enabled | Always |
-
Admin Templates > System > Power Management > Button Settings |
-||
Select the Power button action (plugged in) | Sleep | SetPowerPolicies=True |
-
Select the Power button action (on battery) | Sleep | SetPowerPolicies=True |
-
Select the Sleep button action (plugged in) | Sleep | SetPowerPolicies=True |
-
Select the lid switch action (plugged in) | Sleep | SetPowerPolicies=True |
-
Select the lid switch action (on battery) | Sleep | SetPowerPolicies=True |
-
Admin Templates > System > Power Management > Sleep Settings |
-||
Require a password when a computer wakes (plugged in) | Enabled | SignInOnResume=True |
-
Require a password when a computer wakes (on battery) | Enabled | SignInOnResume=True |
-
Specify the system sleep timeout (plugged in) | *SleepTimeout* | SetPowerPolicies=True |
-
Specify the system sleep timeout (on battery) | *SleepTimeout* | SetPowerPolicies=True |
-
Turn off hybrid sleep (plugged in) | Enabled | SetPowerPolicies=True |
-
Turn off hybrid sleep (on battery) | Enabled | SetPowerPolicies=True |
-
Specify the unattended sleep timeout (plugged in) | *SleepTimeout* | SetPowerPolicies=True |
-
Specify the unattended sleep timeout (on battery) | *SleepTimeout* | SetPowerPolicies=True |
-
Allow standby states (S1-S3) when sleeping (plugged in) | Enabled | SetPowerPolicies=True |
-
Allow standby states (S1-S3) when sleeping (on battery) | Enabled | SetPowerPolicies=True |
-
Specify the system hibernate timeout (plugged in) | Enabled, 0 | SetPowerPolicies=True |
-
Specify the system hibernate timeout (on battery) | Enabled, 0 | SetPowerPolicies=True |
-
Admin Templates>System>Power Management>Video and Display Settings | ||
Turn off the display (plugged in) | *SleepTimeout* | SetPowerPolicies=True |
-
Turn off the display (on battery | *SleepTimeout* | SetPowerPolicies=True |
-
Admin Templates>System>Logon |
-||
Show first sign-in animation | Disabled | Always |
-
Hide entry points for Fast User Switching | Enabled | Always |
-
Turn on convenience PIN sign-in | Disabled | Always |
-
Turn off picture password sign-in | Enabled | Always |
-
Turn off app notification on the lock screen | Enabled | Always |
-
Allow users to select when a password is required when resuming from connected standby | Disabled | SignInOnResume=True |
-
Block user from showing account details on sign-in | Enabled | Always |
-
Admin Templates>System>User Profiles |
-||
Turn off the advertising ID | Enabled | SetEduPolicies=True |
-
Admin Templates>Windows Components |
-||
Do not show Windows Tips *Only on Pro, Enterprise, and Education* | Enabled | SetEduPolicies=True |
-
Turn off Microsoft consumer experiences *Only on Pro, Enterprise, and Education* | Enabled | SetEduPolicies=True |
-
Microsoft Passport for Work | Disabled | Always |
-
Prevent the usage of OneDrive for file storage | Enabled | Always |
-
Admin Templates>Windows Components>Biometrics |
-||
Allow the use of biometrics | Disabled | Always |
-
Allow users to log on using biometrics | Disabled | Always |
-
Allow domain users to log on using biometrics | Disabled | Always |
-
Admin Templates>Windows Components>Data Collection and Preview Builds |
-||
Toggle user control over Insider builds | Disabled | Always |
-
Disable pre-release features or settings | Disabled | Always |
-
Do not show feedback notifications | Enabled | Always |
-
Admin Templates>Windows Components>File Explorer |
-||
Show lock in the user tile menu | Disabled | Always |
-
Admin Templates>Windows Components>Maintenance Scheduler |
-||
Automatic Maintenance Activation Boundary | *MaintenanceStartTime* | Always |
-
Automatic Maintenance Random Delay | Enabled, 2 hours | Always |
-
Automatic Maintenance WakeUp Policy | Enabled | Always |
-
Admin Templates>Windows Components>Microsoft Edge |
-||
Open a new tab with an empty tab | Disabled | SetEduPolicies=True |
-
Configure corporate home pages | Enabled, about:blank | SetEduPolicies=True |
-
Admin Templates>Windows Components>Search |
-||
Allow Cortana | Disabled | SetEduPolicies=True |
+
Admin Templates > Control Panel > Personalization | ||
Prevent enabling lock screen slide show | Enabled | Always |
Prevent changing lock screen and logon image | Enabled | Always |
Admin Templates > System > Power Management > Button Settings | ||
Select the Power button action (plugged in) | Sleep | SetPowerPolicies=True |
Select the Power button action (on battery) | Sleep | SetPowerPolicies=True |
Select the Sleep button action (plugged in) | Sleep | SetPowerPolicies=True |
Select the lid switch action (plugged in) | Sleep | SetPowerPolicies=True |
Select the lid switch action (on battery) | Sleep | SetPowerPolicies=True |
Admin Templates > System > Power Management > Sleep Settings | ||
Require a password when a computer wakes (plugged in) | Enabled | SignInOnResume=True |
Require a password when a computer wakes (on battery) | Enabled | SignInOnResume=True |
Specify the system sleep timeout (plugged in) | *SleepTimeout* | SetPowerPolicies=True |
Specify the system sleep timeout (on battery) | *SleepTimeout* | SetPowerPolicies=True |
Turn off hybrid sleep (plugged in) | Enabled | SetPowerPolicies=True |
Turn off hybrid sleep (on battery) | Enabled | SetPowerPolicies=True |
Specify the unattended sleep timeout (plugged in) | *SleepTimeout* | SetPowerPolicies=True |
Specify the unattended sleep timeout (on battery) | *SleepTimeout* | SetPowerPolicies=True |
Allow standby states (S1-S3) when sleeping (plugged in) | Enabled | SetPowerPolicies=True |
Allow standby states (S1-S3) when sleeping (on battery) | Enabled | SetPowerPolicies=True |
Specify the system hibernate timeout (plugged in) | Enabled, 0 | SetPowerPolicies=True |
Specify the system hibernate timeout (on battery) | Enabled, 0 | SetPowerPolicies=True |
Admin Templates>System>Power Management>Video and Display Settings | ||
Turn off the display (plugged in) | *SleepTimeout* | SetPowerPolicies=True |
Turn off the display (on battery | *SleepTimeout* | SetPowerPolicies=True |
Admin Templates>System>Logon | ||
Show first sign-in animation | Disabled | Always |
Hide entry points for Fast User Switching | Enabled | Always |
Turn on convenience PIN sign-in | Disabled | Always |
Turn off picture password sign-in | Enabled | Always |
Turn off app notification on the lock screen | Enabled | Always |
Allow users to select when a password is required when resuming from connected standby | Disabled | SignInOnResume=True |
Block user from showing account details on sign-in | Enabled | Always |
Admin Templates>System>User Profiles | ||
Turn off the advertising ID | Enabled | SetEduPolicies=True |
Admin Templates>Windows Components | ||
Do not show Windows Tips *Only on Pro, Enterprise, and Education* | Enabled | SetEduPolicies=True |
Turn off Microsoft consumer experiences *Only on Pro, Enterprise, and Education* | Enabled | SetEduPolicies=True |
Microsoft Passport for Work | Disabled | Always |
Prevent the usage of OneDrive for file storage | Enabled | Always |
Admin Templates>Windows Components>Biometrics | ||
Allow the use of biometrics | Disabled | Always |
Allow users to log on using biometrics | Disabled | Always |
Allow domain users to log on using biometrics | Disabled | Always |
Admin Templates>Windows Components>Data Collection and Preview Builds | ||
Toggle user control over Insider builds | Disabled | Always |
Disable pre-release features or settings | Disabled | Always |
Do not show feedback notifications | Enabled | Always |
Admin Templates>Windows Components>File Explorer | ||
Show lock in the user tile menu | Disabled | Always |
Admin Templates>Windows Components>Maintenance Scheduler | ||
Automatic Maintenance Activation Boundary | *MaintenanceStartTime* | Always |
Automatic Maintenance Random Delay | Enabled, 2 hours | Always |
Automatic Maintenance WakeUp Policy | Enabled | Always |
Admin Templates>Windows Components>Microsoft Edge | ||
Open a new tab with an empty tab | Disabled | SetEduPolicies=True |
Configure corporate home pages | Enabled, about:blank | SetEduPolicies=True |
Admin Templates>Windows Components>Search | ||
Allow Cortana | Disabled | SetEduPolicies=True |
Windows Settings>Security Settings>Local Policies>Security Options |
-||
Interactive logon: Do not display last user name | Enabled, Disabled when account model is only guest |
-Always |
Interactive logon: Do not display last user name | Enabled, Disabled when account model is only guest | Always |
Interactive logon: Sign-in last interactive user automatically after a system-initiated restart | Disabled | Always |
Shutdown: Allow system to be shut down without having to log on | Disabled | Always |
-
User Account Control: Behavior of the elevation prompt for standard users | Auto deny | Always |
-
Shutdown: Allow system to be shut down without having to log on | Disabled | Always |
User Account Control: Behavior of the elevation prompt for standard users | Auto deny | Always |