From 1e168448aaf1390f63f827a59a0fe5d17e253607 Mon Sep 17 00:00:00 2001 From: gkomatsu Date: Mon, 2 May 2022 11:04:30 -0700 Subject: [PATCH] Clarify the restrictions of MDM Wins Over GP Updated the note section that informs limitations of MDM Wins Over GP. Several customer feedback revealed there some policies under Policy CSP that does not respect this function. --- .../mdm/policy-csp-controlpolicyconflict.md | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md index e66ffbee8b..020a873465 100644 --- a/windows/client-management/mdm/policy-csp-controlpolicyconflict.md +++ b/windows/client-management/mdm/policy-csp-controlpolicyconflict.md @@ -32,6 +32,14 @@ manager: dansimp **ControlPolicyConflict/MDMWinsOverGP** +> [!NOTE] +> MDM policy win over Group Policy are applicable to limited set of Group Policies. It dows not apply to the following GP settings. +> - Group Policies that does not have a mapping with a MDM Policy controlled through Policy CSP. +> - Group Policies that are not defined by ADMX (Administrative Templates). -- Example: Password policy - minimum password age. +> - Group Policies under Windows Update category. +> + + |Edition|Windows 10|Windows 11| @@ -58,9 +66,6 @@ manager: dansimp This policy allows the IT admin to control which policy will be used whenever both the MDM policy and its equivalent Group Policy (GP) are set on the device. -> [!NOTE] -> MDMWinsOverGP only applies to policies in Policy CSP. MDM policies win over Group Policies where applicable; not all Group Policies are available via MDM or CSP. It does not apply to other MDM settings with equivalent GP settings that are defined in other CSPs. - This policy is used to ensure that MDM policy wins over GP when policy is configured on MDM channel. The default value is 0. The MDM policies in Policy CSP will behave as described if this policy value is set 1. > [!NOTE]