diff --git a/windows/client-management/mdm/policy-csp-datausage.md b/windows/client-management/mdm/policy-csp-datausage.md
index da61efc35d..66ecdcc47e 100644
--- a/windows/client-management/mdm/policy-csp-datausage.md
+++ b/windows/client-management/mdm/policy-csp-datausage.md
@@ -1,112 +1,168 @@
---
-title: Policy CSP - DataUsage
-description: Learn how to use the Policy CSP - DataUsage setting to configure the cost of 4G connections on the local machine.
+title: DataUsage Policy CSP
+description: Learn more about the DataUsage Area in Policy CSP
+author: vinaypamnani-msft
+manager: aaroncz
ms.author: vinpa
-ms.topic: article
+ms.date: 12/27/2022
+ms.localizationpriority: medium
ms.prod: windows-client
ms.technology: itpro-manage
-author: vinaypamnani-msft
-ms.localizationpriority: medium
-ms.date: 09/27/2019
-ms.reviewer:
-manager: aaroncz
+ms.topic: reference
---
+
+
+
# Policy CSP - DataUsage
> [!TIP]
-> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](../understanding-admx-backed-policies.md).
+> Some of these are ADMX-backed policies and require a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
>
-> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](../understanding-admx-backed-policies.md#enabling-a-policy).
+> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
>
> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
-
+
+
+
-
-## DataUsage policies
+
+## SetCost3G
-
- -
- DataUsage/SetCost3G
-
- -
- DataUsage/SetCost4G
-
-
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1703 [10.0.15063] and later |
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DataUsage/SetCost3G
+```
+
-
+
+
+This policy setting configures the cost of 3G connections on the local machine.
-
-**DataUsage/SetCost3G**
+If this policy setting is enabled, a drop-down list box presenting possible cost values will be active. Selecting one of the following values from the list will set the cost of all 3G connections on the local machine:
-
+- Unrestricted: Use of this connection is unlimited and not restricted by usage charges and capacity constraints.
-
-This policy is deprecated in Windows 10, version 1809.
+- Fixed: Use of this connection is not restricted by usage charges and capacity constraints up to a certain data limit.
-
-
+- Variable: This connection is costed on a per byte basis.
-
+If this policy setting is disabled or is not configured, the cost of 3G connections is Fixed by default.
+
-
-**DataUsage/SetCost4G**
+
+
+
-
+
+**Description framework properties**:
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Add, Delete, Get, Replace |
+
+
+> [!TIP]
+> This is an ADMX-backed policy and requires SyncML format for configuration. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
-
-
+**ADMX mapping**:
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+| Name | Value |
+|:--|:--|
+| Name | SetCost3G |
+| Friendly Name | Set 3G Cost |
+| Location | Computer Configuration |
+| Path | Network > WWAN Service > WWAN Media Cost |
+| Registry Key Name | Software\Policies\Microsoft\Windows\WwanSvc\NetCost |
+| ADMX File Name | wwansvc.admx |
+
-> [!div class = "checklist"]
-> * Device
+
+
+
-
+
-
-
+
+## SetCost4G
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1703 [10.0.15063] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DataUsage/SetCost4G
+```
+
+
+
+
This policy setting configures the cost of 4G connections on the local machine.
If this policy setting is enabled, a drop-down list box presenting possible cost values will be active. Selecting one of the following values from the list will set the cost of all 4G connections on the local machine:
- Unrestricted: Use of this connection is unlimited and not restricted by usage charges and capacity constraints.
+
- Fixed: Use of this connection is not restricted by usage charges and capacity constraints up to a certain data limit.
+
- Variable: This connection is costed on a per byte basis.
If this policy setting is disabled or is not configured, the cost of 4G connections is Fixed by default.
+
-
+
+
+
+
+**Description framework properties**:
-
-ADMX Info:
-- GP Friendly name: *Set 4G Cost*
-- GP name: *SetCost4G*
-- GP path: *Network/WWAN Service/WWAN Media Cost*
-- GP ADMX file name: *wwansvc.admx*
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Add, Delete, Get, Replace |
+
-
-
-
+
+> [!TIP]
+> This is an ADMX-backed policy and requires SyncML format for configuration. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
+**ADMX mapping**:
+| Name | Value |
+|:--|:--|
+| Name | SetCost4G |
+| Friendly Name | Set 4G Cost |
+| Location | Computer Configuration |
+| Path | Network > WWAN Service > WWAN Media Cost |
+| Registry Key Name | Software\Policies\Microsoft\Windows\WwanSvc\NetCost |
+| ADMX File Name | wwansvc.admx |
+
-
+
+
+
-## Related topics
+
+
+
+
+
+
+
+
+## Related articles
[Policy configuration service provider](policy-configuration-service-provider.md)
diff --git a/windows/client-management/mdm/policy-csp-defender.md b/windows/client-management/mdm/policy-csp-defender.md
index efc7a8a312..665840ec64 100644
--- a/windows/client-management/mdm/policy-csp-defender.md
+++ b/windows/client-management/mdm/policy-csp-defender.md
@@ -4,7 +4,7 @@ description: Learn more about the Defender Area in Policy CSP
author: vinaypamnani-msft
manager: aaroncz
ms.author: vinpa
-ms.date: 11/02/2022
+ms.date: 12/27/2022
ms.localizationpriority: medium
ms.prod: windows-client
ms.technology: itpro-manage
@@ -36,6 +36,7 @@ ms.topic: reference
+
This policy setting allows you to configure scans for malicious software and unwanted software in archive files such as .ZIP or .CAB files.
If you enable or do not configure this setting, archive files will be scanned.
@@ -102,6 +103,7 @@ If you disable this setting, archive files will not be scanned. However, archive
+
This policy setting allows you to configure behavior monitoring.
If you enable or do not configure this setting, behavior monitoring will be enabled.
@@ -168,6 +170,7 @@ If you disable this setting, behavior monitoring will be disabled.
+
This policy setting allows you to join Microsoft MAPS. Microsoft MAPS is the online community that helps you choose how to respond to potential threats. The community also helps stop the spread of new malicious software infections.
You can choose to send basic or additional information about detected software. Additional information helps Microsoft create new security intelligence and help it to protect your computer. This information can include things like location of detected items on your computer if harmful software was removed. The information will be automatically collected and sent. In some instances, personal information might unintentionally be sent to Microsoft. However, Microsoft will not use this information to identify you or contact you.
@@ -222,7 +225,6 @@ In Windows 10, Basic membership is no longer available, so setting the value to
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > MAPS |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Spynet |
-| Registry Value Name | SpynetReporting |
| ADMX File Name | WindowsDefender.admx |
@@ -248,6 +250,7 @@ In Windows 10, Basic membership is no longer available, so setting the value to
+
This policy setting allows you to configure e-mail scanning. When e-mail scanning is enabled, the engine will parse the mailbox and mail files, according to their specific format, in order to analyze the mail bodies and attachments. Several e-mail formats are currently supported, for example: pst (Outlook), dbx, mbx, mime (Outlook Express), binhex (Mac). Email scanning is not supported on modern email clients.
If you enable this setting, e-mail scanning will be enabled.
@@ -314,6 +317,7 @@ If you disable or do not configure this setting, e-mail scanning will be disable
+
This policy setting allows you to configure scanning mapped network drives.
If you enable this setting, mapped network drives will be scanned.
@@ -380,6 +384,7 @@ If you disable or do not configure this setting, mapped network drives will not
+
This policy setting allows you to manage whether or not to scan for malicious software and unwanted software in the contents of removable drives, such as USB flash drives, when running a full scan.
If you enable this setting, removable drives will be scanned during any type of scan.
@@ -446,6 +451,7 @@ If you disable or do not configure this setting, removable drives will not be sc
+
Allows or disallows Windows Defender Intrusion Prevention functionality.
@@ -494,6 +500,7 @@ Allows or disallows Windows Defender Intrusion Prevention functionality.
+
This policy setting allows you to configure scanning for all downloaded files and attachments.
If you enable or do not configure this setting, scanning for all downloaded files and attachments will be enabled.
@@ -560,6 +567,7 @@ If you disable this setting, scanning for all downloaded files and attachments w
+
This policy setting allows you to configure monitoring for file and program activity.
If you enable or do not configure this setting, monitoring for file and program activity will be enabled.
@@ -626,13 +634,8 @@ If you disable this setting, monitoring for file and program activity will be di
-This policy turns off real-time protection in Microsoft Defender Antivirus.
-
-Real-time protection consists of always-on scanning with file and process behavior monitoring and heuristics. When real-time protection is on, Microsoft Defender Antivirus detects malware and potentially unwanted software that attempts to install itself or run on your device, and prompts you to take action on malware detections.
-
-If you enable this policy setting, real-time protection is turned off.
-
-If you either disable or do not configure this policy setting, real-time protection is turned on.
+
+Allows or disallows Windows Defender Realtime Monitoring functionality.
@@ -694,6 +697,7 @@ If you either disable or do not configure this policy setting, real-time protect
+
This policy setting allows you to configure scanning for network files. It is recommended that you do not enable this setting.
If you enable this setting, network files will be scanned.
@@ -760,6 +764,7 @@ If you disable or do not configure this setting, network files will not be scann
+
Allows or disallows Windows Defender Script Scanning functionality.
@@ -808,6 +813,7 @@ Allows or disallows Windows Defender Script Scanning functionality.
+
This policy setting allows you to configure whether or not to display AM UI to the users.
If you enable this setting AM UI won't be available to users.
@@ -871,6 +877,7 @@ If you enable this setting AM UI won't be available to users.
+
Exclude files and paths from Attack Surface Reduction (ASR) rules.
Enabled:
@@ -913,7 +920,6 @@ You can configure ASR rules in the Configure Attack Surface Reduction rules GP s
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Microsoft Defender Exploit Guard > Attack Surface Reduction |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR |
-| Registry Value Name | ExploitGuard_ASR_ASROnlyExclusions |
| ADMX File Name | WindowsDefender.admx |
@@ -939,6 +945,7 @@ You can configure ASR rules in the Configure Attack Surface Reduction rules GP s
+
Set the state for each Attack Surface Reduction (ASR) rule.
After enabling this setting, you can set each rule to the following in the Options section:
@@ -965,9 +972,9 @@ The following status IDs are permitted under the value column:
Example:
-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx 0
-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx 1
-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx 2
+xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx 0
+xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx 1
+xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx 2
Disabled:
No ASR rules will be configured.
@@ -1002,7 +1009,6 @@ You can exclude folders or files in the ""Exclude files and paths from Attack Su
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Microsoft Defender Exploit Guard > Attack Surface Reduction |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR |
-| Registry Value Name | ExploitGuard_ASR_Rules |
| ADMX File Name | WindowsDefender.admx |
@@ -1028,6 +1034,7 @@ You can exclude folders or files in the ""Exclude files and paths from Attack Su
+
This policy setting allows you to configure the maximum percentage CPU utilization permitted during a scan. Valid values for this setting are a percentage represented by the integers 5 to 100. A value of 0 indicates that there should be no throttling of CPU utilization. The default value is 50.
If you enable this setting, CPU utilization will not exceed the percentage specified.
@@ -1061,7 +1068,6 @@ If you disable or do not configure this setting, CPU utilization will not exceed
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Scan |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Scan |
-| Registry Value Name | AvgCPULoadFactor |
| ADMX File Name | WindowsDefender.admx |
@@ -1087,6 +1093,7 @@ If you disable or do not configure this setting, CPU utilization will not exceed
+
This policy setting allows you to manage whether a check for new virus and spyware security intelligence will occur before running a scan.
This setting applies to scheduled scans, but it has no effect on scans initiated manually from the user interface or to the ones started from the command line using "mpcmdrun -Scan".
@@ -1129,7 +1136,6 @@ If you disable this setting or do not configure this setting, the scan will star
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Scan |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Scan |
-| Registry Value Name | CheckForSignaturesBeforeRunningScan |
| ADMX File Name | WindowsDefender.admx |
@@ -1155,7 +1161,10 @@ If you disable this setting or do not configure this setting, the scan will star
-This policy setting determines how aggressive Windows Defender Antivirus will be in blocking and scanning suspicious files. Value type is integer. If this setting is on, Windows Defender Antivirus will be more aggressive when identifying suspicious files to block and scan; otherwise, it will be less aggressive and therefore block and scan with less frequency. For more information about specific values that are supported, see the Windows Defender Antivirus documentation site. NoteThis feature requires the Join Microsoft MAPS setting enabled in order to function.
+
+This policy setting determines how aggressive Windows Defender Antivirus will be in blocking and scanning suspicious files. Value type is integer. If this setting is on, Windows Defender Antivirus will be more aggressive when identifying suspicious files to block and scan; otherwise, it will be less aggressive and therefore block and scan with less frequency. For more information about specific values that are supported, see the Windows Defender Antivirus documentation site.
+
+**Note**: This feature requires the Join Microsoft MAPS setting enabled in order to function.
@@ -1188,13 +1197,12 @@ This policy setting determines how aggressive Windows Defender Antivirus will be
| Name | Value |
|:--|:--|
-| Name | MpCloudBlockLevel |
+| Name | MpEngine_MpCloudBlockLevel |
| Friendly Name | Select cloud protection level |
| Element Name | Select cloud blocking level |
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > MpEngine |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\MpEngine |
-| Registry Value Name | MpCloudBlockLevel |
| ADMX File Name | WindowsDefender.admx |
@@ -1220,7 +1228,10 @@ This policy setting determines how aggressive Windows Defender Antivirus will be
-This feature allows Windows Defender Antivirus to block a suspicious file for up to 60 seconds, and scan it in the cloud to make sure it's safe. Value type is integer, range is 0 - 50. The typical cloud check timeout is 10 seconds. To enable the extended cloud check feature, specify the extended time in seconds, up to an additional 50 seconds. For example, if the desired timeout is 60 seconds, specify 50 seconds in this setting, which will enable the extended cloud check feature, and will raise the total time to 60 seconds. NoteThis feature depends on three other MAPS settings the must all be enabled- Configure the 'Block at First Sight' feature; Join Microsoft MAPS; Send file samples when further analysis is required.
+
+This feature allows Windows Defender Antivirus to block a suspicious file for up to 60 seconds, and scan it in the cloud to make sure it's safe. Value type is integer, range is 0 - 50. The typical cloud check timeout is 10 seconds. To enable the extended cloud check feature, specify the extended time in seconds, up to an additional 50 seconds. For example, if the desired timeout is 60 seconds, specify 50 seconds in this setting, which will enable the extended cloud check feature, and will raise the total time to 60 seconds.
+
+**Note**: This feature depends on three other MAPS settings the must all be enabled- Configure the 'Block at First Sight' feature; Join Microsoft MAPS; Send file samples when further analysis is required.
@@ -1243,13 +1254,12 @@ This feature allows Windows Defender Antivirus to block a suspicious file for up
| Name | Value |
|:--|:--|
-| Name | MpBafsExtendedTimeout |
+| Name | MpEngine_MpBafsExtendedTimeout |
| Friendly Name | Configure extended cloud check |
| Element Name | Specify the extended cloud check time in seconds |
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > MpEngine |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\MpEngine |
-| Registry Value Name | MpBafsExtendedTimeout |
| ADMX File Name | WindowsDefender.admx |
@@ -1275,6 +1285,7 @@ This feature allows Windows Defender Antivirus to block a suspicious file for up
+
Add additional applications that should be considered "trusted" by controlled folder access.
These applications are allowed to modify or delete files in controlled folder access folders.
@@ -1320,7 +1331,6 @@ Default system folders are automatically guarded, but you can add folders in the
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Microsoft Defender Exploit Guard > Controlled Folder Access |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access |
-| Registry Value Name | ExploitGuard_ControlledFolderAccess_AllowedApplications |
| ADMX File Name | WindowsDefender.admx |
@@ -1346,6 +1356,7 @@ Default system folders are automatically guarded, but you can add folders in the
+
Specify additional folders that should be guarded by the Controlled folder access feature.
Files in these folders cannot be modified or deleted by untrusted applications.
@@ -1392,7 +1403,6 @@ Microsoft Defender Antivirus automatically determines which applications can be
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Microsoft Defender Exploit Guard > Controlled Folder Access |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access |
-| Registry Value Name | ExploitGuard_ControlledFolderAccess_ProtectedFolders |
| ADMX File Name | WindowsDefender.admx |
@@ -1418,6 +1428,7 @@ Microsoft Defender Antivirus automatically determines which applications can be
+
This policy setting defines the number of days items should be kept in the Quarantine folder before being removed.
If you enable this setting, items will be removed from the Quarantine folder after the number of days specified.
@@ -1451,7 +1462,6 @@ If you disable or do not configure this setting, items will be kept in the quara
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Quarantine |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Quarantine |
-| Registry Value Name | PurgeItemsAfterDelay |
| ADMX File Name | WindowsDefender.admx |
@@ -1477,9 +1487,10 @@ If you disable or do not configure this setting, items will be kept in the quara
-This policy setting allows you to configure catch-up scans for scheduled full scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time.
+
+This policy setting allows you to configure catch-up scans for scheduled full scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time.
-If you enable this setting, catch-up scans for scheduled full scans will be turned on. If a computer is offline for two consecutive scheduled scans, a catch-up scan is started the next time someone logs on to the computer. If there is no scheduled scan configured, there will be no catch-up scan run.
+If you enable this setting, catch-up scans for scheduled full scans will be turned on. If a computer is offline for two consecutive scheduled scans, a catch-up scan is started the next time someone logs on to the computer. If there is no scheduled scan configured, there will be no catch-up scan run.
If you disable or do not configure this setting, catch-up scans for scheduled full scans will be turned off.
@@ -1517,7 +1528,6 @@ If you disable or do not configure this setting, catch-up scans for scheduled fu
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Scan |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Scan |
-| Registry Value Name | DisableCatchupFullScan |
| ADMX File Name | WindowsDefender.admx |
@@ -1543,9 +1553,10 @@ If you disable or do not configure this setting, catch-up scans for scheduled fu
-This policy setting allows you to configure catch-up scans for scheduled quick scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time.
+
+This policy setting allows you to configure catch-up scans for scheduled quick scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time.
-If you enable this setting, catch-up scans for scheduled quick scans will be turned on. If a computer is offline for two consecutive scheduled scans, a catch-up scan is started the next time someone logs on to the computer. If there is no scheduled scan configured, there will be no catch-up scan run.
+If you enable this setting, catch-up scans for scheduled quick scans will be turned on. If a computer is offline for two consecutive scheduled scans, a catch-up scan is started the next time someone logs on to the computer. If there is no scheduled scan configured, there will be no catch-up scan run.
If you disable or do not configure this setting, catch-up scans for scheduled quick scans will be turned off.
@@ -1583,7 +1594,6 @@ If you disable or do not configure this setting, catch-up scans for scheduled qu
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Scan |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Scan |
-| Registry Value Name | DisableCatchupQuickScan |
| ADMX File Name | WindowsDefender.admx |
@@ -1609,6 +1619,7 @@ If you disable or do not configure this setting, catch-up scans for scheduled qu
+
Enable or disable controlled folder access for untrusted applications. You can choose to block, audit, or allow attempts by untrusted apps to:
- Modify or delete files in protected folders, such as the Documents folder
- Write to disk sectors
@@ -1695,7 +1706,6 @@ Same as Disabled.
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Microsoft Defender Exploit Guard > Controlled Folder Access |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access |
-| Registry Value Name | EnableControlledFolderAccess |
| ADMX File Name | WindowsDefender.admx |
@@ -1721,6 +1731,7 @@ Same as Disabled.
+
This policy setting allows you to enable or disable low CPU priority for scheduled scans.
If you enable this setting, low CPU priority will be used during scheduled scans.
@@ -1761,7 +1772,6 @@ If you disable or do not configure this setting, not changes will be made to CPU
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Scan |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Scan |
-| Registry Value Name | LowCpuPriority |
| ADMX File Name | WindowsDefender.admx |
@@ -1787,6 +1797,7 @@ If you disable or do not configure this setting, not changes will be made to CPU
+
Enable or disable Microsoft Defender Exploit Guard network protection to prevent employees from using any application to access dangerous domains that may host phishing scams, exploit-hosting sites, and other malicious content on the Internet.
Enabled:
@@ -1835,7 +1846,6 @@ Same as Disabled.
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Microsoft Defender Exploit Guard > Network Protection |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection |
-| Registry Value Name | EnableNetworkProtection |
| ADMX File Name | WindowsDefender.admx |
@@ -1861,6 +1871,7 @@ Same as Disabled.
+
Allows an administrator to specify a list of file type extensions to ignore during a scan. Each file type in the list must be separated by a |. For example, lib|obj.
@@ -1889,7 +1900,6 @@ Allows an administrator to specify a list of file type extensions to ignore duri
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Exclusions |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Exclusions |
-| Registry Value Name | Exclusions_Extensions |
| ADMX File Name | WindowsDefender.admx |
@@ -1915,6 +1925,7 @@ Allows an administrator to specify a list of file type extensions to ignore duri
+
Allows an administrator to specify a list of directory paths to ignore during a scan. Each path in the list must be separated by a |. For example, C:\Example|C:\Example1.
@@ -1943,7 +1954,6 @@ Allows an administrator to specify a list of directory paths to ignore during a
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Exclusions |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Exclusions |
-| Registry Value Name | Exclusions_Paths |
| ADMX File Name | WindowsDefender.admx |
@@ -1969,7 +1979,10 @@ Allows an administrator to specify a list of directory paths to ignore during a
-Allows an administrator to specify a list of files opened by processes to ignore during a scan. ImportantThe process itself is not excluded from the scan, but can be by using the Defender/ExcludedPaths policy to exclude its path. Each file type must be separated by a |. For example, C:\Example. exe|C:\Example1.exe.
+
+Allows an administrator to specify a list of files opened by processes to ignore during a scan.
+
+**Important**: The process itself is not excluded from the scan, but can be by using the Defender/ExcludedPaths policy to exclude its path. Each file type must be separated by a |. For example, C:\Example. exe|C:\Example1.exe.
@@ -1997,7 +2010,6 @@ Allows an administrator to specify a list of files opened by processes to ignore
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Exclusions |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Exclusions |
-| Registry Value Name | Exclusions_Processes |
| ADMX File Name | WindowsDefender.admx |
@@ -2023,6 +2035,7 @@ Allows an administrator to specify a list of files opened by processes to ignore
+
Enable or disable detection for potentially unwanted applications. You can choose to block, audit, or allow when potentially unwanted software is being downloaded or attempts to install itself on your computer.
Enabled:
@@ -2071,7 +2084,6 @@ Same as Disabled.
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender |
-| Registry Value Name | PUAProtection |
| ADMX File Name | WindowsDefender.admx |
@@ -2097,6 +2109,7 @@ Same as Disabled.
+
This policy setting allows you to configure monitoring for incoming and outgoing files, without having to turn off monitoring entirely. It is recommended for use on servers where there is a lot of incoming and outgoing file activity but for performance reasons need to have scanning disabled for a particular scan direction. The appropriate configuration should be evaluated based on the server role.
Note that this configuration is only honored for NTFS volumes. For any other file system type, full monitoring of file and program activity will be present on those volumes.
@@ -2148,7 +2161,6 @@ If you disable or do not configure this setting, monitoring for incoming and out
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Real-time Protection |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Real-Time Protection |
-| Registry Value Name | RealtimeScanDirection |
| ADMX File Name | WindowsDefender.admx |
@@ -2174,6 +2186,7 @@ If you disable or do not configure this setting, monitoring for incoming and out
+
This policy setting allows you to specify the scan type to use during a scheduled scan. Scan type options are:
1 = Quick Scan (default)
2 = Full Scan
@@ -2217,7 +2230,6 @@ If you disable or do not configure this setting, the default scan type will used
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Scan |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Scan |
-| Registry Value Name | ScanParameters |
| ADMX File Name | WindowsDefender.admx |
@@ -2243,7 +2255,8 @@ If you disable or do not configure this setting, the default scan type will used
-This policy setting allows you to specify the time of day at which to perform a daily quick scan. The time value is represented as the number of minutes past midnight (00:00). For example, 120 (0x78) is equivalent to 02:00 AM. By default, this setting is set to disabled. The schedule is based on local time on the computer where the scan is executing.
+
+This policy setting allows you to specify the time of day at which to perform a daily quick scan. The time value is represented as the number of minutes past midnight (00:00). For example, 120 (0x78) is equivalent to 02:00 AM. By default, this setting is set to disabled. The schedule is based on local time on the computer where the scan is executing.
If you enable this setting, a daily quick scan will run at the time of day specified.
@@ -2276,7 +2289,6 @@ If you disable or do not configure this setting, daily quick scan controlled by
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Scan |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Scan |
-| Registry Value Name | ScheduleQuickScanTime |
| ADMX File Name | WindowsDefender.admx |
@@ -2302,6 +2314,7 @@ If you disable or do not configure this setting, daily quick scan controlled by
+
This policy setting allows you to specify the day of the week on which to perform a scheduled scan. The scan can also be configured to run every day or to never run at all.
This setting can be configured with the following ordinal number values:
@@ -2361,7 +2374,6 @@ If you disable or do not configure this setting, a scheduled scan will run at a
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Scan |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Scan |
-| Registry Value Name | ScheduleDay |
| ADMX File Name | WindowsDefender.admx |
@@ -2387,7 +2399,8 @@ If you disable or do not configure this setting, a scheduled scan will run at a
-This policy setting allows you to specify the time of day at which to perform a scheduled scan. The time value is represented as the number of minutes past midnight (00:00). For example, 120 (0x78) is equivalent to 02:00 AM. By default, this setting is set to a time value of 2:00 AM. The schedule is based on local time on the computer where the scan is executing.
+
+This policy setting allows you to specify the time of day at which to perform a scheduled scan. The time value is represented as the number of minutes past midnight (00:00). For example, 120 (0x78) is equivalent to 02:00 AM. By default, this setting is set to a time value of 2:00 AM. The schedule is based on local time on the computer where the scan is executing.
If you enable this setting, a scheduled scan will run at the time of day specified.
@@ -2420,7 +2433,6 @@ If you disable or do not configure this setting, a scheduled scan will run at a
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Scan |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Scan |
-| Registry Value Name | ScheduleTime |
| ADMX File Name | WindowsDefender.admx |
@@ -2446,6 +2458,7 @@ If you disable or do not configure this setting, a scheduled scan will run at a
+
This policy setting allows you to define the security intelligence location for VDI-configured computers.
If you disable or do not configure this setting, security intelligence will be referred from the default local source.
@@ -2500,6 +2513,7 @@ If you disable or do not configure this setting, security intelligence will be r
+
This policy setting allows you to define the order in which different security intelligence update sources should be contacted. The value of this setting should be entered as a pipe-separated string enumerating the security intelligence update sources in order. Possible values are: “InternalDefinitionUpdateServer”, “MicrosoftUpdateServer”, “MMPC”, and “FileShares”
For example: { InternalDefinitionUpdateServer | MicrosoftUpdateServer | MMPC }
@@ -2559,6 +2573,7 @@ If you disable or do not configure this setting, security intelligence update so
+
This policy setting allows you to configure UNC file share sources for downloading security intelligence updates. Sources will be contacted in the order specified. The value of this setting should be entered as a pipe-separated string enumerating the security intelligence update sources. For example: "{\\unc1 | \\unc2 }". The list is empty by default.
If you enable this setting, the specified sources will be contacted for security intelligence updates. Once security intelligence updates have been successfully downloaded from one specified source, the remaining sources in the list will not be contacted.
@@ -2616,6 +2631,7 @@ If you disable or do not configure this setting, the list will remain empty by d
+
This policy setting allows you to specify an interval at which to check for security intelligence updates. The time value is represented as the number of hours between update checks. Valid values range from 1 (every hour) to 24 (once per day).
If you enable this setting, checks for security intelligence updates will occur at the interval specified.
@@ -2649,7 +2665,6 @@ If you disable or do not configure this setting, checks for security intelligenc
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Security Intelligence Updates |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Signature Updates |
-| Registry Value Name | SignatureUpdateInterval |
| ADMX File Name | WindowsDefender.admx |
@@ -2675,6 +2690,7 @@ If you disable or do not configure this setting, checks for security intelligenc
+
This policy setting configures behaviour of samples submission when opt-in for MAPS telemetry is set.
Possible options are:
@@ -2720,7 +2736,6 @@ Possible options are:
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > MAPS |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Spynet |
-| Registry Value Name | SubmitSamplesConsent |
| ADMX File Name | WindowsDefender.admx |
@@ -2746,7 +2761,8 @@ Possible options are:
-Allows an administrator to specify any valid threat severity levels and the corresponding default action ID to take. This value is a list of threat severity level IDs and corresponding actions, separated by a | using the format threat level=action|threat level=action. For example, 1=6|2=2|4=10|5=3. The following list shows the supported values for threat severity levels:1 – Low severity threats2 – Moderate severity threats4 – High severity threats5 – Severe threatsThe following list shows the supported values for possible actions:1 – Clean. Service tries to recover files and try to disinfect. 2 – Quarantine. Moves files to quarantine. 3 – Remove. Removes files from system. 6 – Allow. Allows file/does none of the above actions. 8 – User defined. Requires user to make a decision on which action to take. 10 – Block. Blocks file execution.
+
+Allows an administrator to specify any valid threat severity levels and the corresponding default action ID to take. This value is a list of threat severity level IDs and corresponding actions, separated by a | using the format threat level=action|threat level=action. For example, 1=6|2=2|4=10|5=3. The following list shows the supported values for threat severity levels:1 – Low severity threats2 – Moderate severity threats4 – High severity threats5 – Severe threatsThe following list shows the supported values for possible actions:2 – Quarantine. Moves files to quarantine. 3 – Remove. Removes files from system. 6 – Allow. Allows file/does none of the above actions. 8 – User defined. Requires user to make a decision on which action to take. 10 – Block. Blocks file execution.
@@ -2773,7 +2789,6 @@ Allows an administrator to specify any valid threat severity levels and the corr
| Location | Computer Configuration |
| Path | Windows Components > Microsoft Defender Antivirus > Threats |
| Registry Key Name | Software\Policies\Microsoft\Windows Defender\Threats |
-| Registry Value Name | Threats_ThreatSeverityDefaultAction |
| ADMX File Name | WindowsDefender.admx |
diff --git a/windows/client-management/mdm/policy-csp-deliveryoptimization.md b/windows/client-management/mdm/policy-csp-deliveryoptimization.md
index 95f4178efd..82f614f2ec 100644
--- a/windows/client-management/mdm/policy-csp-deliveryoptimization.md
+++ b/windows/client-management/mdm/policy-csp-deliveryoptimization.md
@@ -1,1595 +1,1784 @@
---
-title: Policy CSP - DeliveryOptimization
-description: Learn how to use the Policy CSP - DeliveryOptimization setting to configure one or more Microsoft Connected Cache servers to be used by Delivery Optimization.
+title: DeliveryOptimization Policy CSP
+description: Learn more about the DeliveryOptimization Area in Policy CSP
+author: vinaypamnani-msft
+manager: aaroncz
ms.author: vinpa
-ms.topic: article
+ms.date: 12/27/2022
+ms.localizationpriority: medium
ms.prod: windows-client
ms.technology: itpro-manage
-author: vinaypamnani-msft
-ms.localizationpriority: medium
-ms.date: 06/09/2020
-ms.reviewer:
-manager: aaroncz
+ms.topic: reference
---
+
+
+
# Policy CSP - DeliveryOptimization
->[!TIP]
-> These are ADMX-backed policies and require a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](../understanding-admx-backed-policies.md).
+> [!TIP]
+> Some of these are ADMX-backed policies and require a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
>
-> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](../understanding-admx-backed-policies.md#enabling-a-policy).
+> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
>
-> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
+> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
-
+
+
+
-
-## DeliveryOptimization policies
+
+## DOAbsoluteMaxCacheSize
-
- -
- DeliveryOptimization/DOAbsoluteMaxCacheSize
-
- -
- DeliveryOptimization/DOAllowVPNPeerCaching
-
- -
- DeliveryOptimization/DOCacheHost
-
- -
- DeliveryOptimization/DOCacheHostSource
-
- -
- DeliveryOptimization/DODelayBackgroundDownloadFromHttp
-
- -
- DeliveryOptimization/DODelayCacheServerFallbackBackground
-
- -
- DeliveryOptimization/DODelayCacheServerFallbackForeground
-
- -
- DeliveryOptimization/DODelayForegroundDownloadFromHttp
-
- -
- DeliveryOptimization/DODownloadMode
-
- -
- DeliveryOptimization/DOGroupId
-
- -
- DeliveryOptimization/DOGroupIdSource
-
- -
- DeliveryOptimization/DOMaxBackgroundDownloadBandwidth
-
- -
- DeliveryOptimization/DOMaxCacheAge
-
- -
- DeliveryOptimization/DOMaxCacheSize
-
- -
- DeliveryOptimization/DOMaxDownloadBandwidth
-
- -
- DeliveryOptimization/DOMaxForegroundDownloadBandwidth
-
- -
- DeliveryOptimization/DOMaxUploadBandwidth
-
- -
- DeliveryOptimization/DOMinBackgroundQos
-
- -
- DeliveryOptimization/DOMinBatteryPercentageAllowedToUpload
-
- -
- DeliveryOptimization/DOMinDiskSizeAllowedToPeer
-
- -
- DeliveryOptimization/DOMinFileSizeToCache
-
- -
- DeliveryOptimization/DOMinRAMAllowedToPeer
-
- -
- DeliveryOptimization/DOModifyCacheDrive
-
- -
- DeliveryOptimization/DOMonthlyUploadDataCap
-
- -
- DeliveryOptimization/DOPercentageMaxBackgroundBandwidth
-
- -
- DeliveryOptimization/DOPercentageMaxDownloadBandwidth
-
- -
- DeliveryOptimization/DOPercentageMaxForegroundBandwidth
-
- -
- DeliveryOptimization/DORestrictPeerSelectionBy
-
- -
- DeliveryOptimization/DOSetHoursToLimitBackgroundDownloadBandwidth
-
- -
- DeliveryOptimization/DOSetHoursToLimitForegroundDownloadBandwidth
-
-
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1607 [10.0.14393] and later |
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOAbsoluteMaxCacheSize
+```
+
-
+
+
+Specifies the maximum size in GB of Delivery Optimization cache.
-
-**DeliveryOptimization/DOAbsoluteMaxCacheSize**
+This policy overrides the DOMaxCacheSize policy.
-
+The value 0 (zero) means "unlimited" cache; Delivery Optimization will clear the cache when the device runs low on disk space.
+
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+
+
+
+
+**Description framework properties**:
-
-
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[0-4294967295]` |
+| Default Value | 0 |
+
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+**Group policy mapping**:
-> [!div class = "checklist"]
-> * Device
+| Name | Value |
+|:--|:--|
+| Name | AbsoluteMaxCacheSize |
+| Friendly Name | Absolute Max Cache Size (in GB) |
+| Element Name | Absolute Max Cache Size (in GB) |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
-
+
+
+
-
-
-> [!NOTE]
-> This policy is only enforced in Windows 10 Pro, Enterprise, and Education editions.
+
+
+## DOAllowVPNPeerCaching
-Specifies the maximum size in GB of Delivery Optimization cache. This policy overrides the DOMaxCacheSize policy. The value 0 (zero) means "unlimited" cache. Delivery Optimization will clear the cache when the device is running low on disk space.
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1703 [10.0.15063] and later |
+
-The default value is 10.
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOAllowVPNPeerCaching
+```
+
-
-
-ADMX Info:
-- GP Friendly name: *Absolute Max Cache Size (in GB)*
-- GP name: *AbsoluteMaxCacheSize*
-- GP element: *AbsoluteMaxCacheSize*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
+
+
+Specify "true" to allow the device to participate in Peer Caching while connected via VPN to the domain network.
-
-
+This means the device can download from or upload to other domain network devices, either on VPN or on the corporate domain network.
+
-
+
+
+
-
-**DeliveryOptimization/DOAllowVPNPeerCaching**
+
+**Description framework properties**:
-
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Default Value | 0 |
+
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+
+**Allowed values**:
+| Value | Description |
+|:--|:--|
+| 0 (Default) | Not allowed. |
+| 1 | Allowed. |
+
-
-
+
+**Group policy mapping**:
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+| Name | Value |
+|:--|:--|
+| Name | AllowVPNPeerCaching |
+| Friendly Name | Enable Peer Caching while the device connects via VPN |
+| Element Name | Enable Peer Caching while the device connects via VPN |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
-> [!div class = "checklist"]
-> * Device
+
+
+
-
+
-
-
-> [!NOTE]
-> This policy is only enforced in Windows 10 Pro, Enterprise, and Education editions.
+
+## DOCacheHost
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1709 [10.0.16299] and later |
+
-Specifies whether the device is allowed to participate in Peer Caching while connected via VPN to the domain network. This policy means the device can download from or upload to other domain network devices, either on VPN or on the corporate domain network.
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOCacheHost
+```
+
-
-
-ADMX Info:
-- GP Friendly name: *Enable Peer Caching while the device connects via VPN*
-- GP name: *AllowVPNPeerCaching*
-- GP element: *AllowVPNPeerCaching*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
-
-
-
-The following list shows the supported values:
-
-- 0 (default) - Not allowed.
-- 1 - Allowed.
-
-
-
-
-
-
-
-**DeliveryOptimization/DOCacheHost**
-
-
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-
-This policy allows you to configure one or more Microsoft Connected Cache servers to be used by Delivery Optimization.
+
+
+This policy allows you to set one or more Microsoft Connected Cache servers that will be used by your client(s).
One or more values can be added as either fully qualified domain names (FQDN) or IP addresses. To add multiple values, separate each FQDN or IP address by commas.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | List (Delimiter: `,`) |
+
+
+
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | CacheHost |
+| Friendly Name | Cache Server Hostname |
+| Element Name | Cache Server |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
+
+
+
+
-
-
-ADMX Info:
-- GP Friendly name: *Cache Server Hostname*
-- GP name: *CacheHost*
-- GP element: *CacheHost*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-**DeliveryOptimization/DOCacheHostSource**
-
-
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-
-This policy allows you to configure one or more Delivery Optimizations in Network Cache servers through a custom DHCP Option. One or more values can be added as either fully qualified domain names (FQDN) or IP addresses. To add multiple values, separate each FQDN or IP address by commas.
-
-
-
-ADMX Info:
-- GP Friendly name: *Cache Server Hostname Source*
-- GP name: *CacheHostSource*
-- GP element: *CacheHostSource*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
-
-
-
-The following are the supported values:
-- 1 = DHCP Option ID.
-- 2 = DHCP Option ID Force.
-
-When DHCP Option ID (1) is set, the client will query DHCP Option ID 235 and use the returned FQDN or IP value as Cache Server Hostname value. This policy will be overridden when the [Cache Server Hostname](#deliveryoptimization-docachehost) policy has been set.
-
-When DHCP Option ID Force (2) is set, the client will query DHCP Option ID 235 and use the returned FQDN or IP value as Cache Server Hostname value, and will override the Cache Server Hostname policy if it has been set.
-
-> [!Note]
-> If the DHCP Option ID is formatted incorrectly, the client will fall back to the [Cache Server Hostname](#deliveryoptimization-docachehost) policy value if that value has been set.
-
-
-
-
-
-
-
-
-
-
-
-
-
-**DeliveryOptimization/DODelayBackgroundDownloadFromHttp**
-
-
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-This policy allows you to delay the use of an HTTP source in a background download that is allowed to use peer-to-peer.
-
-After the max delay is reached, the download will resume using HTTP, either downloading the entire payload or complementing the bytes that couldn't be downloaded from peers. A download that is waiting for peer sources will appear to be stuck for the end user. The recommended value is 1 hour (3600).
-
-
-
-ADMX Info:
-- GP Friendly name: *Delay background download from http (in secs)*
-- GP name: *DelayBackgroundDownloadFromHttp*
-- GP element: *DelayBackgroundDownloadFromHttp*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
-
-
-
-
-
-
-
-**DeliveryOptimization/DODelayCacheServerFallbackBackground**
-
-
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-Specifies the time in seconds to delay the fallback from Cache Server to the HTTP source for a background content download.
-
-> [!NOTE]
-> The [DODelayBackgroundDownloadFromHttp](#deliveryoptimization-dodelaybackgrounddownloadfromhttp) policy takes precedence over this policy to allow downloads from peers first.
-
-
-
-ADMX Info:
-- GP Friendly name: *Delay Background download Cache Server fallback (in seconds)*
-- GP name: *DelayCacheServerFallbackBackground*
-- GP element: *DelayCacheServerFallbackBackground*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
-
-
-
-This policy is specified in seconds.
-Supported values: 0 - one month (in seconds)
-
-
-
-
-
-
-
-
-
-
-
-
-**DeliveryOptimization/DODelayCacheServerFallbackForeground**
-
-
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-Specifies the time in seconds to delay the fallback from Cache Server to the HTTP source for foreground content download.
-
-> [!NOTE]
-> The [DODelayForegroundDownloadFromHttp](#deliveryoptimization-dodelayforegrounddownloadfromhttp) policy takes precedence over this policy to allow downloads from peers first.
-
-
-
-ADMX Info:
-- GP Friendly name: *Delay Foreground download Cache Server fallback (in seconds)*
-- GP name: *DelayCacheServerFallbackForeground*
-- GP element: *DelayCacheServerFallbackForeground*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
-
-
-
-This policy is specified in seconds.
-Supported values: 0 - one month (in seconds)
-
-
-
-
-
-
-
-
-
-
-**DeliveryOptimization/DODelayForegroundDownloadFromHttp**
-
-
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-This policy allows you to delay the use of an HTTP source in a foreground (interactive) download that is allowed to use peer-to-peer.
-
-After the max delay has reached, the download will resume using HTTP, either downloading the entire payload or complementing the bytes that couldn't be downloaded from Peers.
-
-A download that is waiting for peer sources, will appear to be stuck for the end user.
+
+
+
+## DOCacheHostSource
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 2004 [10.0.19041] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOCacheHostSource
+```
+
+
+
+
+This policy allows you to specify how your client(s) can discover Microsoft Connected Cache servers dynamically.
+
+Options available are:
+
+0 = Disable DNS-SD.
+
+1 = DHCP Option 235.
+
+2 = DHCP Option 235 Force.
+
+If this policy is not configured, the client will attempt to automatically find a cache server using DNS-SD. If set to 0, the client will not use DNS-SD to automatically find a cache server. If set to 1 or 2, the client will query DHCP Option ID 235 and use the returned value as the Cache Server Hostname. Option 2 overrides the Cache Server Hostname policy, if configured.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[0-4294967295]` |
+| Default Value | 0 |
+
+
+
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | CacheHostSource |
+| Friendly Name | Cache Server Hostname Source |
+| Element Name | Cache Server Hostname Source |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
+
+
+
+
+
+
+
+
+## DODelayBackgroundDownloadFromHttp
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DODelayBackgroundDownloadFromHttp
+```
+
+
+
+
+This policy allows you to delay the use of an HTTP source in a background download that is allowed to use P2P.
+
+After the max delay has reached, the download will resume using HTTP, either downloading the entire payload or complementing the bytes that could not be downloaded from Peers.
+
+Note that a download that is waiting for peer sources, will appear to be stuck for the end user.
+
+The recommended value is 1 hour (3600).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[0-4294967295]` |
+| Default Value | 0 |
+
+
+
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | DelayBackgroundDownloadFromHttp |
+| Friendly Name | Delay background download from http (in secs) |
+| Element Name | Delay background download from http (in secs) |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
+
+
+
+
+
+
+
+
+## DODelayCacheServerFallbackBackground
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1903 [10.0.18362] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DODelayCacheServerFallbackBackground
+```
+
+
+
+
+Set this policy to delay the fallback from Cache Server to the HTTP source for a background content download by X seconds.
+
+Note: if you set the policy to delay background download from http, it will apply first (to allow downloads from peers first).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[0-2592000]` |
+| Default Value | 0 |
+
+
+
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | DelayCacheServerFallbackBackground |
+| Friendly Name | Delay Background download Cache Server fallback (in seconds) |
+| Element Name | Delay Background download Cache Server fallback (in secs) |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
+
+
+
+
+
+
+
+
+## DODelayCacheServerFallbackForeground
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1903 [10.0.18362] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DODelayCacheServerFallbackForeground
+```
+
+
+
+
+Set this policy to delay the fallback from Cache Server to the HTTP source for a foreground content download by X seconds.
+
+Note: if you set the policy to delay foreground download from http, it will apply first (to allow downloads from peers first).
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[0-2592000]` |
+| Default Value | 0 |
+
+
+
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | DelayCacheServerFallbackForeground |
+| Friendly Name | Delay Foreground download Cache Server fallback (in seconds) |
+| Element Name | Delay Foreground download Cache Server fallback (in secs) |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
+
+
+
+
+
+
+
+
+## DODelayForegroundDownloadFromHttp
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DODelayForegroundDownloadFromHttp
+```
+
+
+
+
+This policy allows you to delay the use of an HTTP source in a foreground (interactive) download that is allowed to use P2P.
+
+After the max delay has reached, the download will resume using HTTP, either downloading the entire payload or complementing the bytes that could not be downloaded from Peers.
+
+Note that a download that is waiting for peer sources, will appear to be stuck for the end user.
The recommended value is 1 minute (60).
+
-
-
-ADMX Info:
-- GP Friendly name: *Delay Foreground download from http (in secs)*
-- GP name: *DelayForegroundDownloadFromHttp*
-- GP element: *DelayForegroundDownloadFromHttp*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
+
+
+
-
-
-The following list shows the supported values as number of seconds:
+
+**Description framework properties**:
-- 0 to 86400 (1 day)
-- 0 - managed by the cloud service
-- Default isn't configured.
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[0-4294967295]` |
+| Default Value | 0 |
+
-
-
+
+**Group policy mapping**:
-
+| Name | Value |
+|:--|:--|
+| Name | DelayForegroundDownloadFromHttp |
+| Friendly Name | Delay Foreground download from http (in secs) |
+| Element Name | Delay Foreground download from http (in secs) |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
-
-**DeliveryOptimization/DODownloadMode**
+
+
+
-
+
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+
+## DODisallowCacheServerDownloadsOnVPN
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
-
-
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DODisallowCacheServerDownloadsOnVPN
+```
+
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+
+Disallow downloads from Microsoft Connected Cache servers when the device connects via VPN. By default, the device is allowed to download from Microsoft Connected Cache when connected via VPN.
+
-> [!div class = "checklist"]
-> * Device
+
+
+
-
+
+**Description framework properties**:
-
-
-> [!NOTE]
-> This policy is only enforced in Windows 10 Pro, Enterprise, and Education editions.
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Default Value | 0 |
+
+
+**Allowed values**:
+| Value | Description |
+|:--|:--|
+| 0 (Default) | Allowed |
+| 1 | Not allowed |
+
+
+
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | AllowCacheHostWithVPN |
+| Path | DeliveryOptimization > AT > WindowsComponents > DeliveryOptimizationCat |
+| Element Name | DisallowCacheServerDownloadsOnVPN |
+
+
+
+
+
+
+
+
+
+## DODownloadMode
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1507 [10.0.10240] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DODownloadMode
+```
+
+
+
+
Specifies the download method that Delivery Optimization can use in downloads of Windows Updates, Apps and App updates.
-
-
-ADMX Info:
-- GP Friendly name: *Download Mode*
-- GP name: *DownloadMode*
-- GP element: *DownloadMode*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
-
-
-
The following list shows the supported values:
-- 0 – HTTP only, no peering.
-- 1 (default) – HTTP blended with peering behind the same NAT.
-- 2 – HTTP blended with peering across a private group. Peering occurs on devices in the same Active Directory Site (if it exists) or the same domain by default. When this option is selected, peering will cross NATs. To create a custom group use Group ID in combination with Mode 2.
-- 3 – HTTP blended with Internet peering.
-- 99 - Simple download mode with no peering. Delivery Optimization downloads using HTTP only and doesn't attempt to contact the Delivery Optimization cloud services. Added in Windows 10, version 1607.
-- 100 - Bypass mode. Don't use Delivery Optimization and use BITS instead. Added in Windows 10, version 1607. This value is deprecated and will be removed in a future release.
-
-
+0 = HTTP only, no peering.
-
+1 = HTTP blended with peering behind the same NAT.
-
-**DeliveryOptimization/DOGroupId**
+2 = HTTP blended with peering across a private group. Peering occurs on devices in the same Active Directory Site (if exist) or the same domain by default. When this option is selected, peering will cross NATs. To create a custom group use Group ID in combination with Mode 2.
-
+3 = HTTP blended with Internet Peering.
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+99 = Simple download mode with no peering. Delivery Optimization downloads using HTTP only and does not attempt to contact the Delivery Optimization cloud services.
+100 = Bypass mode. Windows 10: Do not use Delivery Optimization and use BITS instead. Windows 11: Deprecated, use Simple mode instead.
+
-
-
+
+
+
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+**Description framework properties**:
-> [!div class = "checklist"]
-> * Device
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Default Value | 0 |
+
-
+
+**Allowed values**:
-
-
-> [!NOTE]
-> This policy is only enforced in Windows 10 Pro, Enterprise, and Education editions.
+| Value | Description |
+|:--|:--|
+| 0 (Default) | HTTP only, no peering. |
+| 1 | HTTP blended with peering behind the same NAT. |
+| 2 | When this option is selected, peering will cross NATs. To create a custom group use Group ID in combination with Mode 2. |
+| 3 | HTTP blended with Internet peering. |
+| 99 | Simple download mode with no peering. Delivery Optimization downloads using HTTP only and does not attempt to contact the Delivery Optimization cloud services. Added in Windows 10, version 1607. |
+| 100 | Bypass mode. Windows 10: Do not use Delivery Optimization and use BITS instead. Windows 11: Deprecated, use Simple mode instead. |
+
+
+**Group policy mapping**:
-This policy specifies an arbitrary group ID that the device belongs to. Use this ID if you need to create a single group for Local Network Peering for branches that are on different domains or aren't on the same LAN. This approach is a best effort optimization and shouldn't be relied on for an authentication of identity.
+| Name | Value |
+|:--|:--|
+| Name | DownloadMode |
+| Friendly Name | Download Mode |
+| Element Name | Download Mode |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
-> [!NOTE]
-> You must use a GUID as the group ID.
+
+
+
-
-
-ADMX Info:
-- GP Friendly name: *Group ID*
-- GP name: *GroupId*
-- GP element: *GroupId*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
+
-
-
+
+## DOGroupId
-
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1607 [10.0.14393] and later |
+
-
-**DeliveryOptimization/DOGroupIdSource**
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOGroupId
+```
+
-
+
+
+Group ID must be set as a GUID. This Policy specifies an arbitrary group ID that the device belongs to.
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+Use this if you need to create a single group for Local Network Peering for branches that are on different domains or are not on the same LAN.
+Note: this is a best effort optimization and should not be relied on for an authentication of identity.
+
-
-
+
+
+
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+**Description framework properties**:
-> [!div class = "checklist"]
-> * Device
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Add, Delete, Get, Replace |
+
-
+
+**Group policy mapping**:
-
-
-Set this policy to restrict peer selection to a specific source. Available options are: 1 = Active Directory Site, 2 = Authenticated domain SID, 3 = DHCP Option ID, 4 = DNS Suffix, 5 = Azure Active Directory.
+| Name | Value |
+|:--|:--|
+| Name | GroupId |
+| Friendly Name | Group ID |
+| Element Name | Group ID |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
-When set, the Group ID is assigned automatically from the selected source. If you set this policy, the GroupID policy will be ignored. The default behavior, when neither the GroupID or GroupIDSource policies are set, is to determine the Group ID using AD Site (1), Authenticated domain SID (2) or AAD Tenant ID (5), in that order. If GroupIDSource is set to either DHCP Option ID (3) or DNS Suffix (4) and those methods fail, the default behavior is used instead. The option set in this policy only applies to Group (2) download mode. If Group (2) isn't set as Download mode, this policy will be ignored. If you set the value to anything other than 0-5, the policy is ignored.
+
+
+
+
+
+
+
+## DOGroupIdSource
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOGroupIdSource
+```
+
+
+
+
+Set this policy to restrict peer selection to a specific source.
+
+Options available are:
+
+1 = AD Site.
+
+2 = Authenticated domain SID.
+
+3 = DHCP Option ID.
+
+4 = DNS Suffix.
+
+5 = AAD Tenant ID.
+
+When set, the Group ID will be assigned automatically from the selected source. This policy is ignored if the GroupID policy is also set.
+
+The options set in this policy only apply to Group (2) download mode. If Group (2) isn't set as Download mode, this policy will be ignored.
For option 3 - DHCP Option ID, the client will query DHCP Option ID 234 and use the returned GUID value as the Group ID.
+
-Starting with Windows 10, version 1903, you can use the Azure Active Directory (Azure AD) Tenant ID as a means to define groups. To do this task, set the value of DOGroupIdSource to 5.
+
+
+
-
-
-ADMX Info:
-- GP Friendly name: *Select the source of Group IDs*
-- GP name: *GroupIdSource*
-- GP element: *GroupIdSource*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
+
+**Description framework properties**:
-
-
-The following list shows the supported values:
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Default Value | 0 |
+
-- 1 - Active Directory site
-- 2 - Authenticated domain SID
-- 3 - DHCP user option
-- 4 - DNS suffix
-- 5 - Azure Active Directory
+
+**Allowed values**:
-
-
+| Value | Description |
+|:--|:--|
+| 0 (Default) | Unset |
+| 1 | AD site |
+| 2 | Authenticated domain SID |
+| 3 | DHCP user option |
+| 4 | DNS suffix |
+| 5 | AAD |
+
-
+
+**Group policy mapping**:
-
-**DeliveryOptimization/DOMaxBackgroundDownloadBandwidth**
+| Name | Value |
+|:--|:--|
+| Name | GroupIdSource |
+| Friendly Name | Select the source of Group IDs |
+| Element Name | Source of Group IDs |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
-
+
+
+
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+
+
+## DOMaxBackgroundDownloadBandwidth
-
-
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 2004 [10.0.19041] and later |
+
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOMaxBackgroundDownloadBandwidth
+```
+
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-This policy specifies the maximum background download bandwidth in KiloBytes/second that the device can use across all concurrent download activities using Delivery Optimization.
+
+
+Specifies the maximum background download bandwidth in KiloBytes/second that the device can use across all concurrent download activities using Delivery Optimization.
The default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth for downloads.
+
-
-
-ADMX Info:
-- GP Friendly name: *Maximum Background Download Bandwidth (in KB/s)*
-- GP name: *MaxBackgroundDownloadBandwidth*
-- GP element: *MaxBackgroundDownloadBandwidth*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
+
+
+
-
-
+
+**Description framework properties**:
-
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[0-4294967295]` |
+| Default Value | 0 |
+
-
-**DeliveryOptimization/DOMaxCacheAge**
+
+**Group policy mapping**:
-
+| Name | Value |
+|:--|:--|
+| Name | MaxBackgroundDownloadBandwidth |
+| Friendly Name | Maximum Background Download Bandwidth (in KB/s) |
+| Element Name | Maximum Background Download Bandwidth (in KB/s) |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+
+
+
-
-
+
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+## DOMaxCacheAge
-> [!div class = "checklist"]
-> * Device
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1507 [10.0.10240] and later |
+
-
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOMaxCacheAge
+```
+
-
-
-> [!NOTE]
-> This policy is only enforced in Windows 10 Pro, Enterprise, and Education editions.
+
+
+Specifies the maximum time in seconds that each file is held in the Delivery Optimization cache after downloading successfully.
+The value 0 (zero) means "unlimited"; Delivery Optimization will hold the files in the cache longer and make the files available for uploads to other devices, as long as the cache size has not exceeded.
+
-Specifies the maximum time in seconds that each file is held in the Delivery Optimization cache after downloading successfully. The value 0 (zero) means "unlimited"; Delivery Optimization will hold the files in the cache longer and make the files available for uploads to other devices, as long as the cache size hasn't exceeded. The value 0 is new in Windows 10, version 1607.
+
+
+
-The default value is 259200 seconds (three days).
+
+**Description framework properties**:
-
-
-ADMX Info:
-- GP Friendly name: *Max Cache Age (in seconds)*
-- GP name: *MaxCacheAge*
-- GP element: *MaxCacheAge*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[0-4294967295]` |
+| Default Value | 0 |
+
-
-
+
+**Group policy mapping**:
-
+| Name | Value |
+|:--|:--|
+| Name | MaxCacheAge |
+| Friendly Name | Max Cache Age (in seconds) |
+| Element Name | Max Cache Age (in seconds) |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
-
-**DeliveryOptimization/DOMaxCacheSize**
+
+
+
-
+
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+
+## DOMaxCacheSize
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1507 [10.0.10240] and later |
+
-
-
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOMaxCacheSize
+```
+
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+
+Specifies the maximum cache size that Delivery Optimization uses as a percentage of available disk size (1-100).
+
-> [!div class = "checklist"]
-> * Device
+
+
+
-
+
+**Description framework properties**:
-
-
-> [!NOTE]
-> This policy is only enforced in Windows 10 Pro, Enterprise, and Education editions.
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[1-100]` |
+| Default Value | 0 |
+
+
+**Group policy mapping**:
-Specifies the maximum cache size that Delivery Optimization can utilize, as a percentage of disk size (1-100).
+| Name | Value |
+|:--|:--|
+| Name | MaxCacheSize |
+| Friendly Name | Max Cache Size (percentage) |
+| Element Name | Max Cache Size (Percentage) |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
-The default value is 20.
+
+
+
-
-
-ADMX Info:
-- GP Friendly name: *Max Cache Size (percentage)*
-- GP name: *MaxCacheSize*
-- GP element: *MaxCacheSize*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
+
-
-
+
+## DOMaxForegroundDownloadBandwidth
-
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 2004 [10.0.19041] and later |
+
-
-**DeliveryOptimization/DOMaxDownloadBandwidth**
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOMaxForegroundDownloadBandwidth
+```
+
-
-
-
-
-
-
-
-
-
-
-
-This policy is deprecated. Use [DOMaxForegroundDownloadBandwidth](#deliveryoptimization-domaxforegrounddownloadbandwidth) and [DOMaxBackgroundDownloadBandwidth](#deliveryoptimization-domaxbackgrounddownloadbandwidth) policies instead.
-
-
-
-
-
-
-
-
-
-**DeliveryOptimization/DOMaxForegroundDownloadBandwidth**
-
-
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-This policy specifies the maximum foreground download bandwidth in KiloBytes/second that the device can use across all concurrent download activities using Delivery Optimization.
+
+
+Specifies the maximum foreground download bandwidth in KiloBytes/second that the device can use across all concurrent download activities using Delivery Optimization.
The default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth for downloads.
-
-
-
-ADMX Info:
-- GP Friendly name: *Maximum Foreground Download Bandwidth (in KB/s)*
-- GP name: *MaxForegroundDownloadBandwidth*
-- GP element: *MaxForegroundDownloadBandwidth*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
-
-
-
-
-
-
-
-**DeliveryOptimization/DOMaxUploadBandwidth**
-
-
-
-
-
-
-
-
-This policy is deprecated because it only applies to uploads to Internet peers (only allowed when DownloadMode is set to 3) which isn't used in commercial deployments. There's no alternate policy to use.
-
-
-
-
-
-
-
-
-
-**DeliveryOptimization/DOMinBackgroundQos**
-
-
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-> [!NOTE]
-> This policy is only enforced in Windows 10 Pro, Enterprise, and Education editions.
-
-
-Specifies the minimum download QoS (Quality of Service or speed) in KiloBytes/sec for background downloads. This policy affects the blending of peer and HTTP sources. Delivery Optimization complements the download from the HTTP source to achieve the minimum QoS value set.
-
-The default value is 500.
-
-
-
-ADMX Info:
-- GP Friendly name: *Minimum Background QoS (in KB/s)*
-- GP name: *MinBackgroundQos*
-- GP element: *MinBackgroundQos*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
-
-
-
-
-
-
-
-**DeliveryOptimization/DOMinBatteryPercentageAllowedToUpload**
-
-
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-> [!NOTE]
-> This policy is only enforced in Windows 10 Pro, Business, Enterprise, and Education editions.
-
-Specifies any value between 1 and 100 (in percentage) to allow the device to upload data to LAN and Group peers while on battery power. Uploads will automatically pause when the battery level drops below the set minimum battery level. The recommended value to set is 40 (for 40%) if you allow uploads on battery.
-
-The default value is 0. The value 0 (zero) means "not limited" and the cloud service default value will be used.
-
-
-
-ADMX Info:
-- GP Friendly name: *Allow uploads while the device is on battery while under set Battery level (percentage)*
-- GP name: *MinBatteryPercentageAllowedToUpload*
-- GP element: *MinBatteryPercentageAllowedToUpload*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
-
-
-
-
-
-
-
-**DeliveryOptimization/DOMinDiskSizeAllowedToPeer**
-
-
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-> [!NOTE]
-> This policy is only enforced in Windows 10 Pro, Business, Enterprise, and Education editions.
-
-
-Specifies the required minimum disk size (capacity in GB) for the device to use Peer Caching. Recommended values: 64 GB to 256 GB.
-
-> [!NOTE]
-> If the DOMofidyCacheDrive policy is set, the disk size check will apply to the new working directory specified by this policy.
-
-The default value is 32 GB.
-
-
-
-ADMX Info:
-- GP Friendly name: *Minimum disk size allowed to use Peer Caching (in GB)*
-- GP name: *MinDiskSizeAllowedToPeer*
-- GP element: *MinDiskSizeAllowedToPeer*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
-
-
-
-
-
-
-
-**DeliveryOptimization/DOMinFileSizeToCache**
-
-
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-> [!NOTE]
-> This policy is only enforced in Windows 10 Pro, Business, Enterprise, and Education editions.
-
-
-Specifies the minimum content file size in MB enabled to use Peer Caching. Recommended values: 1 MB to 100,000 MB.
-
-The default value is 100 MB.
-
-
-
-ADMX Info:
-- GP Friendly name: *Minimum Peer Caching Content File Size (in MB)*
-- GP name: *MinFileSizeToCache*
-- GP element: *MinFileSizeToCache*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
-
-
-
-
-
-
-
-**DeliveryOptimization/DOMinRAMAllowedToPeer**
-
-
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-> [!NOTE]
-> This policy is only enforced in Windows 10 Pro, Business, Enterprise, and Education editions.
-
-
-Specifies the minimum RAM size in GB required to use Peer Caching. For example, if the minimum set is 1 GB, then devices with 1 GB or higher available RAM will be allowed to use Peer caching. Recommended values: 1 GB to 4 GB.
-
-The default value is 4 GB.
-
-
-
-ADMX Info:
-- GP Friendly name: *Minimum RAM capacity (inclusive) required to enable use of Peer Caching (in GB)*
-- GP name: *MinRAMAllowedToPeer*
-- GP element: *MinRAMAllowedToPeer*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
-
-
-
-
-
-
-
-**DeliveryOptimization/DOModifyCacheDrive**
-
-
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-> [!NOTE]
-> This policy is only enforced in Windows 10 Pro, Enterprise, and Education editions.
-
-
-Specifies the drive that Delivery Optimization should use for its cache. The drive location can be specified using environment variables, drive letter or using a full path.
-
-By default, %SystemDrive% is used to store the cache.
-
-
-
-ADMX Info:
-- GP Friendly name: *Modify Cache Drive*
-- GP name: *ModifyCacheDrive*
-- GP element: *ModifyCacheDrive*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
-
-
-
-
-
-
-
-**DeliveryOptimization/DOMonthlyUploadDataCap**
-
-
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-> [!NOTE]
-> This policy is only enforced in Windows 10 Pro, Enterprise, and Education editions.
-
-
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[0-4294967295]` |
+| Default Value | 0 |
+
+
+
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | MaxForegroundDownloadBandwidth |
+| Friendly Name | Maximum Foreground Download Bandwidth (in KB/s) |
+| Element Name | Maximum Foreground Download Bandwidth (in KB/s) |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
+
+
+
+
+
+
+
+
+## DOMinBackgroundQos
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1607 [10.0.14393] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOMinBackgroundQos
+```
+
+
+
+
+Specifies the minimum download QoS (Quality of Service or speed) for background downloads in KiloBytes/second.
+
+This policy affects the blending of peer and HTTP sources. Delivery Optimization complements the download from HTTP source to achieve the specified minimum QoS value.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[1-4294967295]` |
+| Default Value | 0 |
+
+
+
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | MinBackgroundQos |
+| Friendly Name | Minimum Background QoS (in KB/s) |
+| Element Name | Minimum Background QoS (in KB/s) |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
+
+
+
+
+
+
+
+
+## DOMinBatteryPercentageAllowedToUpload
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1703 [10.0.15063] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOMinBatteryPercentageAllowedToUpload
+```
+
+
+
+
+Specify any value between 1 and 100 (in percentage) to allow the device to upload data to LAN and Group peers while on DC power (Battery).
+
+The recommended value to set if you allow uploads on battery is 40 (for 40%). The device can download from peers while on battery regardless of this policy.
+
+The value 0 means "not-limited"; The cloud service set default value will be used.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[0-100]` |
+| Default Value | 0 |
+
+
+
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | MinBatteryPercentageAllowedToUpload |
+| Friendly Name | Allow uploads while the device is on battery while under set Battery level (percentage) |
+| Element Name | Minimum battery level (Percentage) |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
+
+
+
+
+
+
+
+
+## DOMinDiskSizeAllowedToPeer
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1703 [10.0.15063] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOMinDiskSizeAllowedToPeer
+```
+
+
+
+
+Specifies the required minimum disk size (capacity in GB) for the device to use Peer Caching. The cloud service set default value will be used.
+
+Recommended values: 64 GB to 256 GB.
+
+Note: If the DOModifyCacheDrive policy is set, the disk size check will apply to the new working directory specified by this policy.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[1-100000]` |
+| Default Value | 0 |
+
+
+
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | MinDiskSizeAllowedToPeer |
+| Friendly Name | Minimum disk size allowed to use Peer Caching (in GB) |
+| Element Name | Minimum disk size allowed to use Peer Caching (in GB) |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
+
+
+
+
+
+
+
+
+## DOMinFileSizeToCache
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1703 [10.0.15063] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOMinFileSizeToCache
+```
+
+
+
+
+Specifies the minimum content file size in MB enabled to use Peer Caching.
+
+Recommended values: 1 MB to 100000 MB.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[1-100000]` |
+| Default Value | 0 |
+
+
+
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | MinFileSizeToCache |
+| Friendly Name | Minimum Peer Caching Content File Size (in MB) |
+| Element Name | Minimum Peer Caching Content File Size (in MB) |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
+
+
+
+
+
+
+
+
+## DOMinRAMAllowedToPeer
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1703 [10.0.15063] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOMinRAMAllowedToPeer
+```
+
+
+
+
+Specifies the minimum RAM size in GB required to use Peer Caching.
+
+For example if the minimum set is 1 GB, then devices with 1 GB or higher available RAM will be allowed to use Peer caching.
+
+Recommended values: 1 GB to 4 GB.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[1-100000]` |
+| Default Value | 0 |
+
+
+
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | MinRAMAllowedToPeer |
+| Friendly Name | Minimum RAM capacity (inclusive) required to enable use of Peer Caching (in GB) |
+| Element Name | Minimum RAM capacity (inclusive) required to enable use of Peer Caching (in GB) |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
+
+
+
+
+
+
+
+
+## DOModifyCacheDrive
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1607 [10.0.14393] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOModifyCacheDrive
+```
+
+
+
+
+Specifies the drive Delivery Optimization shall use for its cache.
+
+By default, %SystemDrive% is used to store the cache. The drive location can be specified using environment variables, drive letter or using a full path.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Add, Delete, Get, Replace |
+
+
+
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | ModifyCacheDrive |
+| Friendly Name | Modify Cache Drive |
+| Element Name | Modify Cache Drive |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
+
+
+
+
+
+
+
+
+## DOMonthlyUploadDataCap
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1607 [10.0.14393] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOMonthlyUploadDataCap
+```
+
+
+
+
Specifies the maximum total bytes in GB that Delivery Optimization is allowed to upload to Internet peers in each calendar month.
The value 0 (zero) means "unlimited"; No monthly upload limit is applied if 0 is set.
+
-The default value is 20.
+
+
+
-
-
-ADMX Info:
-- GP Friendly name: *Monthly Upload Data Cap (in GB)*
-- GP name: *MonthlyUploadDataCap*
-- GP element: *MonthlyUploadDataCap*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
+
+**Description framework properties**:
-
-
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[0-4294967295]` |
+| Default Value | 0 |
+
-
+
+**Group policy mapping**:
-
-**DeliveryOptimization/DOPercentageMaxBackgroundBandwidth**
+| Name | Value |
+|:--|:--|
+| Name | MonthlyUploadDataCap |
+| Friendly Name | Monthly Upload Data Cap (in GB) |
+| Element Name | Monthly Upload Data Cap (in GB) |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
-
+
+
+
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+
+
+## DOPercentageMaxBackgroundBandwidth
-
-
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOPercentageMaxBackgroundBandwidth
+```
+
-> [!div class = "checklist"]
-> * Device
+
+
+Specifies the maximum background download bandwidth that Delivery Optimization uses across all concurrent download activities as a percentage of available download bandwidth.
-
+The default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth for background downloads.
+
-
-
-Specifies the maximum background download bandwidth that Delivery Optimization uses across all concurrent download activities as a percentage of available download bandwidth. The default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth for background downloads.
+
+
Downloads from LAN peers won't be throttled even when this policy is set.
+
-
-
-ADMX Info:
-- GP Friendly name: *Maximum Background Download Bandwidth (percentage)*
-- GP name: *PercentageMaxBackgroundBandwidth*
-- GP element: *PercentageMaxBackgroundBandwidth*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
+
+**Description framework properties**:
-
-
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[0-100]` |
+| Default Value | 0 |
+
-
+
+**Group policy mapping**:
-
-**DeliveryOptimization/DOPercentageMaxDownloadBandwidth**
+| Name | Value |
+|:--|:--|
+| Name | PercentageMaxBackgroundBandwidth |
+| Friendly Name | Maximum Background Download Bandwidth (percentage) |
+| Element Name | Maximum Background Download Bandwidth (Percentage) |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
-
+
+
+
-
-This policy is deprecated. Use [DOPercentageMaxForegroundBandwidth](#deliveryoptimization-dopercentagemaxforegroundbandwidth) and [DOPercentageMaxBackgroundBandwidth](#deliveryoptimization-dopercentagemaxbackgroundbandwidth) policies instead.
+
-
-
+
+## DOPercentageMaxForegroundBandwidth
-
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
-
-**DeliveryOptimization/DOPercentageMaxForegroundBandwidth**
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOPercentageMaxForegroundBandwidth
+```
+
-
+
+
+Specifies the maximum foreground download bandwidth that Delivery Optimization uses across all concurrent download activities as a percentage of available download bandwidth.
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+The default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth for foreground downloads.
+
+
+
+
-
-
+
+**Description framework properties**:
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[0-100]` |
+| Default Value | 0 |
+
-> [!div class = "checklist"]
-> * Device
+
+**Group policy mapping**:
-
+| Name | Value |
+|:--|:--|
+| Name | PercentageMaxForegroundBandwidth |
+| Friendly Name | Maximum Foreground Download Bandwidth (percentage) |
+| Element Name | Maximum Foreground Download Bandwidth (Percentage) |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
-
-
-Specifies the maximum foreground download bandwidth that Delivery Optimization uses across all concurrent download activities as a percentage of available download bandwidth. The default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth for foreground downloads.
+
+
+
-Downloads from LAN peers won't be throttled even when this policy is set.
+
-
-
-ADMX Info:
-- GP Friendly name: *Maximum Foreground Download Bandwidth (percentage)*
-- GP name: *PercentageMaxForegroundBandwidth*
-- GP element: *PercentageMaxForegroundBandwidth*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
+
+## DORestrictPeerSelectionBy
-
-
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
-
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DORestrictPeerSelectionBy
+```
+
-
-**DeliveryOptimization/DORestrictPeerSelectionBy**
-
-
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
+
+
Set this policy to restrict peer selection via selected option.
-In Windows 11 the 'Local Peer Discovery' option was introduced to restrict peer discovery to the local network. Currently, the available options include: 0 = NAT, 1 = Subnet mask, and 2 = Local Peer Discovery. These options apply to both Download Modes LAN (1) and Group (2) and therefore it means that there is no peering between subnets. The default value in Windows 11 is set to "Local Peer Discovery".
-If Group mode is set, Delivery Optimization will connect to locally discovered peers that are also part of the same Group (have the same Group ID).
+Options available are:
+0 = NAT.
+1 = Subnet mask.
+2 = Local discovery (DNS-SD).
-The Local Peer Discovery (DNS-SD) option can only be set via MDM delivered policies on Windows 11 builds.
+The default value has changed from 0 (no restriction) to 1 (restrict to the subnet).
-
-
-ADMX Info:
-- GP Friendly name: *Select a method to restrict Peer Selection*
-- GP name: *RestrictPeerSelectionBy*
-- GP element: *RestrictPeerSelectionBy*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
+These options apply to both Download Mode LAN (1) and Group (2).
+
-
-
-The following list shows the supported values:
+
+
+
-- 0 - NAT
-- 1 - Subnet mask
-- 2 - Local Peer Discovery
+
+**Description framework properties**:
-
-
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Default Value | 0 |
+
-
+
+**Allowed values**:
-
-**DeliveryOptimization/DOSetHoursToLimitBackgroundDownloadBandwidth**
+| Value | Description |
+|:--|:--|
+| 0 (Default) | None. |
+| 1 | Subnet mask. |
+| 2 | Local peer discovery (DNS-SD). |
+
-
+
+**Group policy mapping**:
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+| Name | Value |
+|:--|:--|
+| Name | RestrictPeerSelectionBy |
+| Friendly Name | Select a method to restrict Peer Selection |
+| Element Name | Restrict Peer Selection By |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
+
+
+
-
-
+
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+## DOSetHoursToLimitBackgroundDownloadBandwidth
-> [!div class = "checklist"]
-> * Device
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
-
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOSetHoursToLimitBackgroundDownloadBandwidth
+```
+
-
-
+
+
Specifies the maximum background download bandwidth that Delivery Optimization uses during and outside business hours across all concurrent download activities as a percentage of available download bandwidth.
+
-
+
+
+
+
+**Description framework properties**:
-
-ADMX Info:
-- GP Friendly name: *Set Business Hours to Limit Background Download Bandwidth*
-- GP name: *SetHoursToLimitBackgroundDownloadBandwidth*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Add, Delete, Get, Replace |
+
-
-
+
+> [!TIP]
+> This is an ADMX-backed policy and requires SyncML format for configuration. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
+
+**ADMX mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | SetHoursToLimitBackgroundDownloadBandwidth |
+| Friendly Name | Set Business Hours to Limit Background Download Bandwidth |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
+
+
+
+
+
+
+
+
+## DOSetHoursToLimitForegroundDownloadBandwidth
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOSetHoursToLimitForegroundDownloadBandwidth
+```
+
+
+
+
+Specifies the maximum foreground download bandwidth that Delivery Optimization uses during and outside business hours across all concurrent download activities as a percentage of available download bandwidth.
+
+
+
+
This policy allows an IT Admin to define the following details:
- Business hours range (for example 06:00 to 18:00)
- % of throttle for background traffic during business hours
- % of throttle for background traffic outside of business hours
+
-
-
+
+**Description framework properties**:
-
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Add, Delete, Get, Replace |
+
-
-**DeliveryOptimization/DOSetHoursToLimitForegroundDownloadBandwidth**
+
+> [!TIP]
+> This is an ADMX-backed policy and requires SyncML format for configuration. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
-
+**ADMX mapping**:
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+| Name | Value |
+|:--|:--|
+| Name | SetHoursToLimitForegroundDownloadBandwidth |
+| Friendly Name | Set Business Hours to Limit Foreground Download Bandwidth |
+| Location | Computer Configuration |
+| Path | Windows Components > Delivery Optimization |
+| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization |
+| ADMX File Name | DeliveryOptimization.admx |
+
+
+
+
-
-
+
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+## DOVpnKeywords
-> [!div class = "checklist"]
-> * Device
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
-
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/DeliveryOptimization/DOVpnKeywords
+```
+
-
-
-Specifies the maximum foreground download bandwidth that Delivery Optimization uses during and outside business hours across all concurrent download activities as a percentage of available download bandwidth.
+
+
+This policy allows you to set one or more keywords used to recognize VPN connections.
+
-
+
+
+
+
+**Description framework properties**:
-
-ADMX Info:
-- GP Friendly name: *Set Business Hours to Limit Foreground Download Bandwidth*
-- GP name: *SetHoursToLimitForegroundDownloadBandwidth*
-- GP path: *Windows Components/Delivery Optimization*
-- GP ADMX file name: *DeliveryOptimization.admx*
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | List (Delimiter: `,`) |
+
-
-
-This policy allows an IT Admin to define the following details:
+
+**Group policy mapping**:
-- Business hours range (for example 06:00 to 18:00)
-- % of throttle for foreground traffic during business hours
-- % of throttle for foreground traffic outside of business hours
+| Name | Value |
+|:--|:--|
+| Name | VpnKeywords |
+| Path | DeliveryOptimization > AT > WindowsComponents > DeliveryOptimizationCat |
+| Element Name | VpnKeywords |
+
-
-
-
+
+
+
+
-
+
+
+
-## Related topics
+
+
+## Related articles
[Policy configuration service provider](policy-configuration-service-provider.md)
-