mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-17 19:33:37 +00:00
sync
This commit is contained in:
jdeckerMS
@ -21,10 +21,7 @@ Windows 10 Mobile allows enterprises to lock down a device, define multiple use
|
||||
|
||||
This topic provides example XML that you can use in your own lockdown XML file that can be included in a provisioning package or when using a mobile device management (MDM) solution to push lockdown settings to enrolled devices.
|
||||
|
||||
>[!TIP]
|
||||
>Use the [Lockdown Designer app](mobile-lockdown-designer.md) to configure and generate your customized lockdown XML file.
|
||||
|
||||
Lockdown XML is an XML file that contains settings for Windows 10 Mobile. When you deploy the lockdown XML file to a device, it is saved on the device as **wehlockdown.xml**. When the device boots, it looks for wehlockdown.xml and applies any settings configured in the file. In this topic, you'll learn how to create an XML file that contains all lockdown entries available in the AssignedAccessXml area of the [EnterpriseAssignedAccess configuration service provider (CSP)](https://go.microsoft.com/fwlink/p/?LinkID=618601).
|
||||
Lockdown XML is an XML file that contains settings for Windows 10 Mobile. When you deploy the lockdown XML file to a device, it is saved on the device as **wehlockdown.xml**. When the device boots, it looks for wehlockdown.xml and applies any settings configured in the file. In this topic, you'll learn how to create an XML file that contains all lockdown entries available in the AssignedAccessXml area of the [EnterpriseAssignedAccess configuration service provider (CSP)](https://go.microsoft.com/fwlink/p/?L...(line truncated)...
|
||||
|
||||
> [!NOTE]
|
||||
> On Windows 10 desktop editions, *assigned access* is a feature that lets you configure the device to run a single app above the lockscreen ([kiosk mode](set-up-a-device-for-anyone-to-use.md)). On a Windows 10 Mobile device, assigned access refers to the lockdown settings in AssignedAccessXml in the [EnterpriseAssignedAccess configuration service provider (CSP)](https://go.microsoft.com/fwlink/p/?LinkID=618601).
|
||||
@ -335,20 +332,22 @@ The **Settings** section contains an `allow` list of pages in the Settings app.
|
||||
<!-- Allow all settings -->
|
||||
</Settings>
|
||||
```
|
||||
In the following example, all system setting pages are enabled.
|
||||
In earlier versions of Windows 10, you used the page name to define allowed settings. Starting in Windows 10, version 1703, you use the settings URI.
|
||||
|
||||
In the following example for Windows 10, version 1703, all system setting pages are enabled.
|
||||
|
||||
```xml
|
||||
<Settings>
|
||||
<System name="SettingsPageGroupPCSystem" />
|
||||
<System name="SettingsPageDisplay" />
|
||||
<System name="SettingsPageAppsNotifications" />
|
||||
<System name="SettingsPageCalls" />
|
||||
<System name="SettingsPageMessaging" />
|
||||
<System name="SettingsPageBatterySaver" />
|
||||
<System name="SettingsPageStorageSenseStorageOverview" />
|
||||
<System name="SettingsPageGroupPCSystemDeviceEncryption" />
|
||||
<System name="SettingsPageDrivingMode" />
|
||||
<System name="SettingsPagePCSystemInfo" />
|
||||
<System name="ms-settings:screenrotation" />
|
||||
<System name="ms-settings:notifications" />
|
||||
<System name="ms-settings:phone" />
|
||||
<System name="ms-settings:messaging" />
|
||||
<System name="ms-settings:batterysaver" />
|
||||
<System name="ms-settings:batterysaver-usagedetails" />
|
||||
<System name="ms-settings:powersleep" />
|
||||
<System name="ms-settings:about" />
|
||||
<System name="ms-settings:deviceencryption" />
|
||||
<System name="ms-settings:maps" />
|
||||
</Settings>
|
||||
```
|
||||
|
||||
@ -608,13 +607,12 @@ To push lockdown settings to enrolled devices, use the AssignedAccessXML setting
|
||||
<!-- Quick actions: Brightness, Rotation -->
|
||||
<System name="SystemSettings_System_Display_QuickAction_Brightness"/>
|
||||
<System name="SystemSettings_System_Display_Internal_Rotation"/>
|
||||
<!-- Brightness+Rotation, About -->
|
||||
<System name="SettingsPageGroupPCSystem"/>
|
||||
<System name="SettingsPageDisplay"/>
|
||||
<System name="SettingsPagePCSystemInfo"/>
|
||||
<!-- Rotation, About -->
|
||||
<System name="ms-settings:screenrotation"/>
|
||||
<System name="ms-settings:about"/>
|
||||
<!-- Ringtones, sounds -->
|
||||
<System name="SettingsPageGroupPersonalization"/>
|
||||
<System name="SettingsPageSounds"/>
|
||||
<System name="ms-settings:personalizationn"/>
|
||||
<System name="ms-settings:sounds"/>
|
||||
</Settings>
|
||||
<Tiles>
|
||||
<EnableTileManipulation/>
|
||||
@ -709,17 +707,16 @@ To push lockdown settings to enrolled devices, use the AssignedAccessXML setting
|
||||
<DisableMenuItems/>
|
||||
</MenuItems>
|
||||
<Settings>
|
||||
<!-- Brightness+Rotation, Notifications, About -->
|
||||
<System name="SettingsPageGroupPCSystem"/>
|
||||
<System name="SettingsPageAppsNotifications"/>
|
||||
<System name="SettingsPageDisplay"/>
|
||||
<System name="SettingsPagePCSystemInfo"/>
|
||||
<!-- Rotation, Notifications, About -->
|
||||
<System name="ms-settings:screenrotation"/>
|
||||
<System name="ms-settings:notifications"/>
|
||||
<System name="ms-settings:about"/>
|
||||
<!-- Ringtones, sounds -->
|
||||
<System name="SettingsPageGroupPersonalization"/>
|
||||
<System name="SettingsPageSounds"/>
|
||||
<System name="ms-settings:personalization"/>
|
||||
<System name="ms-settings:sounds"/>
|
||||
<!-- Workplace -->
|
||||
<System name="SettingsPageGroupAccounts"/>
|
||||
<System name="SettingsPageAccountsWorkplace"/>
|
||||
<System name="ms-settings:workplace"/>
|
||||
<System name="ms-settings:emailandaccounts"/>
|
||||
</Settings>
|
||||
</Role>
|
||||
<Role guid="{7bb62e8c-81ba-463c-b691-74af68230b42}" name="Manager">
|
||||
@ -862,12 +859,3 @@ To push lockdown settings to enrolled devices, use the AssignedAccessXML setting
|
||||
[Settings and quick actions that can be locked down in Windows 10 Mobile](settings-that-can-be-locked-down.md)
|
||||
|
||||
[Product IDs in Windows 10 Mobile](product-ids-in-windows-10-mobile.md)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@ -20,7 +20,15 @@ localizationpriority: high
|
||||
|
||||
This topic lists the settings and quick actions that can be locked down in Windows 10 Mobile.
|
||||
|
||||
## Settings lockdown
|
||||
## Settings lockdown in Windows 10, version 1703
|
||||
|
||||
In earlier versions of Windows 10, you used the page name to define allowed settings. Starting in Windows 10, version 1703, you use the settings URI.
|
||||
|
||||
For example, in place of **SettingsPageDisplay**, you would use **ms-settings:display**.
|
||||
|
||||
See the [ms-settings: URI scheme reference](https://docs.microsoft.com/windows/uwp/launch-resume/launch-settings-app#ms-settings-uri-scheme-reference) to find the URI for each Settings page.
|
||||
|
||||
## Settings lockdown in Windows 10, version 1607 and earlier
|
||||
|
||||
|
||||
You can use Lockdown.xml to configure lockdown settings.
|
||||
@ -451,52 +459,26 @@ You can specify the quick actions as follows:
|
||||
|
||||
``` syntax
|
||||
<Settings>
|
||||
<System name="SystemSettings_System_Display_QuickAction_Brightness"/>
|
||||
<System name="SystemSettings_System_Display_Internal_Rotation"/>
|
||||
<System name="SystemSettings_QuickAction_WiFi"/>
|
||||
<System name="SystemSettings_QuickAction_InternetSharing"/>
|
||||
<System name="SystemSettings_QuickAction_CellularData"/>
|
||||
<System name="SystemSettings_QuickAction_AirplaneMode"/>
|
||||
<System name="SystemSettings_Privacy_LocationEnabledUserPhone"/>
|
||||
<System name="SystemSettings_Network_VPN_QuickAction"/>
|
||||
<System name="SystemSettings_Flashlight_Toggle"/>
|
||||
<System name="SystemSettings_Device_BluetoothQuickAction"/>
|
||||
<System name="SystemSettings_BatterySaver_LandingPage_OverrideControl" />
|
||||
<System name="SystemSettings_QuickAction_QuietHours" />
|
||||
<System name="SystemSettings_QuickAction_Camera" />
|
||||
<System name="SystemSettings_Launcher_QuickNote" />
|
||||
<System name="QuickActions_Launcher_AllSettings" />
|
||||
<System name="QuickActions_Launcher_DeviceDiscovery" />
|
||||
<System name="SystemSettings_BatterySaver_LandingPage_OverrideControl" />
|
||||
<System name="SystemSettings_Device_BluetoothQuickAction"/>
|
||||
<System name="SystemSettings_Flashlight_Toggle"/>
|
||||
<System name="SystemSettings_Launcher_QuickNote" />
|
||||
<System name="SystemSettings_Network_VPN_QuickAction"/>
|
||||
<System name="SystemSettings_Privacy_LocationEnabledUserPhone"/>
|
||||
<System name="SystemSettings_QuickAction_AirplaneMode"/>
|
||||
<System name="SystemSettings_QuickAction_Camera" />
|
||||
<System name="SystemSettings_QuickAction_CellularData"/>
|
||||
<System name="SystemSettings_QuickAction_InternetSharing"/>
|
||||
<System name="SystemSettings_QuickAction_QuietHours" />
|
||||
<System name="SystemSettings_QuickAction_WiFi"/>
|
||||
<System name="SystemSettings_System_Display_Internal_Rotation"/>
|
||||
<System name="SystemSettings_System_Display_QuickAction_Brightness"/>
|
||||
</Settings>
|
||||
```
|
||||
|
||||
Some quick actions are dependent on related settings pages/page groups. When a dependent page/group is not available, then the corresponding quick action will also be hidden.
|
||||
|
||||
**Note**
|
||||
Dependent settings group/pages will be automatically enabled when a quick action is specified in the lockdown xml file. For example, if the Rotation quick setting is specified, the following group and page will automatically be added to the allow list: “SettingsPageSystemDisplay” and “SettingsPageDisplay”.
|
||||
|
||||
|
||||
|
||||
The following table lists the dependencies between quick actions and Settings groups/pages.
|
||||
|
||||
| Quick action | Settings group | Settings page |
|
||||
|-----|-------|-------|
|
||||
| SystemSettings\_System\_Display\_QuickAction\_Brightness | SettingsPageSystemDisplay| SettingsPageDisplay |
|
||||
| SystemSettings\_System\_Display\_Internal\_Rotation | SettingsPageSystemDisplay | SettingsPageDisplay |
|
||||
| SystemSettings\_QuickAction\_WiFi | SettingsPageNetworkWiFi | SettingsPageNetworkWiFi |
|
||||
| SystemSettings\_QuickAction\_InternetSharing | SettingsPageNetworkInternetSharing | SettingsPageNetworkInternetSharing |
|
||||
| SystemSettings\_QuickAction\_CellularData | SettingsGroupCellular | SettingsPageNetworkCellular |
|
||||
| SystemSettings\_QuickAction\_AirplaneMode | SettingsPageNetworkAirplaneMode | SettingsPageNetworkAirplaneMode |
|
||||
| SystemSettings\_Privacy\_LocationEnabledUserPhone | SettingsGroupPrivacyLocationGlobals | SettingsPagePrivacyLocation |
|
||||
| SystemSettings\_Network\_VPN\_QuickAction | SettingsPageNetworkVPN | SettingsPageNetworkVPN |
|
||||
| SystemSettings\_Launcher\_QuickNote | N/A | N/A |
|
||||
| SystemSettings\_Flashlight\_Toggle | N/A | N/A |
|
||||
| SystemSettings\_Device\_BluetoothQuickAction | SettingsPagePCSystemBluetooth | SettingsPagePCSystemBluetooth |
|
||||
| SystemSettings\_BatterySaver\_LandingPage\_OverrideControl | BatterySaver\_LandingPage\_SettingsConfiguration | SettingsPageBatterySaver |
|
||||
| QuickActions\_Launcher\_DeviceDiscovery | N/A | N/A |
|
||||
| QuickActions\_Launcher\_AllSettings | N/A | N/A |
|
||||
| SystemSettings\_QuickAction\_QuietHours | N/A | N/A |
|
||||
| SystemSettings\_QuickAction\_Camera | N/A | N/A |
|
||||
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user