diff --git a/windows/client-management/mdm/policy-csp-storage.md b/windows/client-management/mdm/policy-csp-storage.md
index 787eee3961..56c09fc0f4 100644
--- a/windows/client-management/mdm/policy-csp-storage.md
+++ b/windows/client-management/mdm/policy-csp-storage.md
@@ -1,928 +1,935 @@
---
-title: Policy CSP - Storage
-description: Learn to use the Policy CSP - Storage settings to automatically clean some of the user’s files to free up disk space.
+title: Storage Policy CSP
+description: Learn more about the Storage Area in Policy CSP
+author: vinaypamnani-msft
+manager: aaroncz
ms.author: vinpa
-ms.topic: article
+ms.date: 12/09/2022
+ms.localizationpriority: medium
ms.prod: windows-client
ms.technology: itpro-manage
-author: vinaypamnani-msft
-ms.localizationpriority: medium
-ms.date: 03/25/2022
-ms.reviewer:
-manager: aaroncz
+ms.topic: reference
---
+
+
+
# Policy CSP - Storage
-
-
-
-## Storage policies
-
-
- -
- Storage/AllowDiskHealthModelUpdates
-
- -
- Storage/AllowStorageSenseGlobal
-
- -
- Storage/AllowStorageSenseTemporaryFilesCleanup
-
- -
- Storage/ConfigStorageSenseCloudContentDehydrationThreshold
-
- -
- Storage/ConfigStorageSenseDownloadsCleanupThreshold
-
- -
- Storage/ConfigStorageSenseGlobalCadence
-
- -
- Storage/ConfigStorageSenseRecycleBinCleanupThreshold
-
- -
- Storage/EnhancedStorageDevices
-
- -
- Storage/RemovableDiskDenyWriteAccess
-
- -
- Storage/WPDDevicesDenyReadAccessPerDevice
-
- -
- Storage/WPDDevicesDenyReadAccessPerUser
-
- -
- Storage/WPDDevicesDenyWriteAccessPerDevice
-
- -
- Storage/WPDDevicesDenyWriteAccessPerUser
-
- -
- StorageHealthMonitor/DisableStorageHealthMonitor
-
-
-
-
-
-
-**Storage/AllowDiskHealthModelUpdates**
-
-
-The table below shows the applicability of Windows:
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-Allows disk health model updates.
-
-Supported value type is integer.
-
-
-
-ADMX Info:
-- GP Friendly name: *Allow downloading updates to the Disk Failure Prediction Model*
-- GP name: *SH_AllowDiskHealthModelUpdates*
-- GP path: *System/Storage Health*
-- GP ADMX file name: *StorageHealth.admx*
-
-
-
-The following list shows the supported values:
-
-- 0 - Don't allow
-- 1 (default) - Allow
-
-
-
-
-
-
-
-**Storage/AllowStorageSenseGlobal**
-
-
-The table below shows the applicability of Windows:
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|||
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-> [!NOTE]
-> Versions prior to version 1903 don't support group policy.
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-Storage Sense can automatically clean some of the user’s files to free up disk space. By default, Storage Sense is automatically turned on when the machine runs into low disk space, and it is set to run whenever the machine runs into storage pressure. This cadence can be changed in Storage settings or set with the Storage/ConfigStorageSenseGlobalCadence group policy.
-
-If you enable this policy setting without setting a cadence, Storage Sense is turned on for the machine with the default cadence of "during low free disk space." Users can't disable Storage Sense, but they can adjust the cadence (unless you also configure the Storage/ConfigStorageSenseGlobalCadence group policy).
-
-If you disable this policy setting, the machine will turn off Storage Sense. Users can't enable Storage Sense.
-
-If you don't configure this policy setting, Storage Sense is turned off by default until the user runs into low disk space or the user enables it manually. Users can configure this setting in Storage settings.
-
-
-ADMX Info:
-- GP Friendly name: *Allow Storage Sense*
-- GP name: *SS_AllowStorageSenseGlobal*
-- GP path: *System/Storage Sense*
-- GP ADMX file name: *StorageSense.admx*
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-**Storage/AllowStorageSenseTemporaryFilesCleanup**
-
-
-Versions prior to version 1903 don't support group policy.
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|||
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-> [!NOTE]
-> Versions prior to version 1903 don't support group policy.
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-When Storage Sense runs, it can delete the user’s temporary files that aren't in use.
-
-If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy doesn't have any effect.
-
-If you enable this policy setting, Storage Sense will delete the user’s temporary files that aren't in use. Users can't disable this setting in Storage settings.
-
-If you disable this policy setting, Storage Sense won't delete the user’s temporary files. Users can't enable this setting in Storage settings.
-
-If you don't configure this policy setting, Storage Sense will delete the user’s temporary files by default. Users can configure this setting in Storage settings.
-
-
-
-ADMX Info:
-- GP Friendly name: *Allow Storage Sense Temporary Files cleanup*
-- GP name: *SS_AllowStorageSenseTemporaryFilesCleanup*
-- GP path: *System/Storage Sense*
-- GP ADMX file name: *StorageSense.admx*
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-**Storage/ConfigStorageSenseCloudContentDehydrationThreshold**
-
-
-The table below shows the applicability of Windows:
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|||
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-> [!NOTE]
-> Versions prior to version 1903 don't support group policy.
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-When Storage Sense runs, it can dehydrate cloud-backed content that hasn’t been opened in a certain number of days.
-
-If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy doesn't have any effect.
-
-If you enable this policy setting, you must provide the minimum number of days a cloud-backed file can remain unopened before Storage Sense dehydrates it. Supported values are: 0–365.
-
-If you set this value to zero, Storage Sense won't dehydrate any cloud-backed content. The default value is 0, which never dehydrates cloud-backed content.
-
-If you disable or don't configure this policy setting, then Storage Sense won't dehydrate any cloud-backed content by default. Users can configure this setting in Storage settings.
-
-
-
-ADMX Info:
-- GP Friendly name: *Configure Storage Sense Cloud Content dehydration threshold*
-- GP name: *SS_ConfigStorageSenseCloudContentDehydrationThreshold*
-- GP path: *System/Storage Sense*
-- GP ADMX file name: *StorageSense.admx*
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-**Storage/ConfigStorageSenseDownloadsCleanupThreshold**
-
-
-The table below shows the applicability of Windows:
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|||
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-> [!NOTE]
-> Versions prior to version 1903 don't support group policy.
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
+> [!TIP]
+> Some of these are ADMX-backed policies and require a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
+>
+> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
+>
+> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
+
+
+
+
+
+
+## AllowDiskHealthModelUpdates
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1709 [10.0.16299] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/Storage/AllowDiskHealthModelUpdates
+```
+
+
+
+
+Allows downloading new updates to ML Model parameters for predicting storage disk failure.
+
+Enabled:
+Updates would be downloaded for the Disk Failure Prediction Failure Model.
+
+Disabled:
+Updates would not be downloaded for the Disk Failure Prediction Failure Model.
+
+Not configured:
+Same as Enabled.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Default Value | 1 |
+
+
+
+**Allowed values**:
+
+| Value | Description |
+|:--|:--|
+| 0 | Do not allow |
+| 1 (Default) | Allow |
+
+
+
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | SH_AllowDiskHealthModelUpdates |
+| Friendly Name | Allow downloading updates to the Disk Failure Prediction Model |
+| Location | Computer Configuration |
+| Path | System > Storage Health |
+| Registry Key Name | Software\Policies\Microsoft\Windows\StorageHealth |
+| Registry Value Name | AllowDiskHealthModelUpdates |
+| ADMX File Name | StorageHealth.admx |
+
+
+
+
+
+
+
+
+
+## AllowStorageSenseGlobal
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1903 [10.0.18362] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/Storage/AllowStorageSenseGlobal
+```
+
+
+
+
+Storage Sense can automatically clean some of the user’s files to free up disk space. By default, Storage Sense is automatically turned on when the machine runs into low disk space and is set to run whenever the machine runs into storage pressure. This cadence can be changed in Storage settings or set with the "Configure Storage Sense cadence" group policy.
+
+Enabled:
+Storage Sense is turned on for the machine, with the default cadence as ‘during low free disk space’. Users cannot disable Storage Sense, but they can adjust the cadence (unless you also configure the "Configure Storage Sense cadence" group policy).
+
+Disabled:
+Storage Sense is turned off the machine. Users cannot enable Storage Sense.
+
+Not Configured:
+By default, Storage Sense is turned off until the user runs into low disk space or the user enables it manually. Users can configure this setting in Storage settings.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Default Value | 0 |
+
+
+
+**Allowed values**:
+
+| Value | Description |
+|:--|:--|
+| 1 | Allow |
+| 0 (Default) | Block |
+
+
+
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | SS_AllowStorageSenseGlobal |
+| Friendly Name | Allow Storage Sense |
+| Location | Computer Configuration |
+| Path | System > Storage Sense |
+| Registry Key Name | Software\Policies\Microsoft\Windows\StorageSense |
+| Registry Value Name | AllowStorageSenseGlobal |
+| ADMX File Name | StorageSense.admx |
+
+
+
+
+
+
+
+
+
+## AllowStorageSenseTemporaryFilesCleanup
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1903 [10.0.18362] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/Storage/AllowStorageSenseTemporaryFilesCleanup
+```
+
+
+
+
+When Storage Sense runs, it can delete the user’s temporary files that are not in use.
+
+If the group policy "Allow Storage Sense" is disabled, then this policy does not have any effect.
+
+Enabled:
+Storage Sense will delete the user’s temporary files that are not in use. Users cannot disable this setting in Storage settings.
+
+Disabled:
+Storage Sense will not delete the user’s temporary files. Users cannot enable this setting in Storage settings.
+
+Not Configured:
+By default, Storage Sense will delete the user’s temporary files. Users can configure this setting in Storage settings.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Default Value | 1 |
+
+
+
+**Allowed values**:
+
+| Value | Description |
+|:--|:--|
+| 1 (Default) | Allow |
+| 0 | Block |
+
+
+
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | SS_AllowStorageSenseTemporaryFilesCleanup |
+| Friendly Name | Allow Storage Sense Temporary Files cleanup |
+| Location | Computer Configuration |
+| Path | System > Storage Sense |
+| Registry Key Name | Software\Policies\Microsoft\Windows\StorageSense |
+| Registry Value Name | AllowStorageSenseTemporaryFilesCleanup |
+| ADMX File Name | StorageSense.admx |
+
+
+
+
+
+
+
+
+
+## ConfigStorageSenseCloudContentDehydrationThreshold
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1903 [10.0.18362] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/Storage/ConfigStorageSenseCloudContentDehydrationThreshold
+```
+
+
+
+
+When Storage Sense runs, it can dehydrate cloud-backed content that hasn’t been opened in a certain amount of days.
+
+If the group policy "Allow Storage Sense" is disabled, then this policy does not have any effect.
+
+Enabled:
+You must provide the minimum number of days a cloud-backed file can remain unopened before Storage Sense dehydrates it from the sync root. Supported values are: 0 - 365.
+If you set this value to zero, Storage Sense will not dehydrate any cloud-backed content. The default value is 0, or never dehydrating cloud-backed content.
+
+Disabled or Not Configured:
+By default, Storage Sense will not dehydrate any cloud-backed content. Users can configure this setting in Storage settings.
+
+
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[0-365]` |
+| Default Value | 0 |
+
+
+
+**Group policy mapping**:
+
+| Name | Value |
+|:--|:--|
+| Name | SS_ConfigStorageSenseCloudContentDehydrationThreshold |
+| Friendly Name | Configure Storage Sense Cloud Content dehydration threshold |
+| Location | Computer Configuration |
+| Path | System > Storage Sense |
+| Registry Key Name | Software\Policies\Microsoft\Windows\StorageSense |
+| ADMX File Name | StorageSense.admx |
+
+
+
+
+
+
+
+
+
+## ConfigStorageSenseDownloadsCleanupThreshold
+
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1903 [10.0.18362] and later |
+
+
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/Storage/ConfigStorageSenseDownloadsCleanupThreshold
+```
+
+
+
+
When Storage Sense runs, it can delete files in the user’s Downloads folder if they haven’t been opened for more than a certain number of days.
-If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy doesn't have any effect.
+If the group policy "Allow Storage Sense" is disabled, then this policy does not have any effect.
-If you enable this policy setting, you must provide the minimum number of days a file can remain unopened before Storage Sense deletes it from the Downloads folder. Supported values are: 0-365.
+Enabled:
+You must provide the minimum number of days a file can remain unopened before Storage Sense deletes it from Downloads folder. Supported values are: 0 - 365.
+If you set this value to zero, Storage Sense will not delete files in the user’s Downloads folder. The default is 0, or never deleting files in the Downloads folder.
-If you set this value to zero, Storage Sense won't delete files in the user’s Downloads folder. The default is 0, or never deleting files in the Downloads folder.
+Disabled or Not Configured:
+By default, Storage Sense will not delete files in the user’s Downloads folder. Users can configure this setting in Storage settings.
+
-If you disable or don't configure this policy setting, then Storage Sense won't delete files in the user’s Downloads folder by default. Users can configure this setting in Storage settings.
+
+
+
-
-
-ADMX Info:
-- GP Friendly name: *Configure Storage Storage Downloads cleanup threshold*
-- GP name: *SS_ConfigStorageSenseDownloadsCleanupThreshold*
-- GP path: *System/Storage Sense*
-- GP ADMX file name: *StorageSense.admx*
+
+**Description framework properties**:
-
-
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[0-365]` |
+| Default Value | 0 |
+
-
-
+
+**Group policy mapping**:
-
-
+| Name | Value |
+|:--|:--|
+| Name | SS_ConfigStorageSenseDownloadsCleanupThreshold |
+| Friendly Name | Configure Storage Storage Downloads cleanup threshold |
+| Location | Computer Configuration |
+| Path | System > Storage Sense |
+| Registry Key Name | Software\Policies\Microsoft\Windows\StorageSense |
+| ADMX File Name | StorageSense.admx |
+
-
-
+
+
+
-
+
-
-**Storage/ConfigStorageSenseGlobalCadence**
+
+## ConfigStorageSenseGlobalCadence
-
-The table below shows the applicability of Windows:
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1903 [10.0.18362] and later |
+
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|||
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/Storage/ConfigStorageSenseGlobalCadence
+```
+
-> [!NOTE]
-> Versions prior to version 1903 don't support group policy.
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
+
+
Storage Sense can automatically clean some of the user’s files to free up disk space.
-If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy doesn't have any effect.
-If you enable this policy setting, you must provide the desired Storage Sense cadence.
+If the group policy "Allow Storage Sense" is disabled, then this policy does not have any effect.
-The following are supported options:
+Enabled:
+You must provide the desired Storage Sense cadence. Supported options are: daily, weekly, monthly, and during low free disk space. The default is 0 (during low free disk space).
-- 1 – Daily
-- 7 – Weekly
-- 30 – Monthly
-- 0 – During low free disk space
+Disabled or Not Configured:
+By default, the Storage Sense cadence is set to “during low free disk space”. Users can configure this setting in Storage settings.
+
-The default is 0 (during low free disk space).
+
+
-If you don't configure this policy setting, then the Storage Sense cadence is set to “during low free disk space” by default. Users can configure this setting in Storage settings.
+Use the following integer values for the supported options:
-
-
-ADMX Info:
-- GP Friendly name: *Configure Storage Sense cadence*
-- GP name: *SS_ConfigStorageSenseGlobalCadence*
-- GP path: *System/Storage Sense*
-- GP ADMX file name: *StorageSense.admx*
+- `0`: During low free disk space (default)
+- `1`: Daily
+- `7`: Weekly
+- `30`: Monthly
-
-
+
-
-
+
+**Description framework properties**:
-
-
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[0-4294967295]` |
+| Default Value | 0 |
+
-
-
+
+**Group policy mapping**:
-
+| Name | Value |
+|:--|:--|
+| Name | SS_ConfigStorageSenseGlobalCadence |
+| Friendly Name | Configure Storage Sense cadence |
+| Location | Computer Configuration |
+| Path | System > Storage Sense |
+| Registry Key Name | Software\Policies\Microsoft\Windows\StorageSense |
+| ADMX File Name | StorageSense.admx |
+
-
-**Storage/ConfigStorageSenseRecycleBinCleanupThreshold**
+
+
+
-
-The table below shows the applicability of Windows:
+
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|||
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+
+## ConfigStorageSenseRecycleBinCleanupThreshold
-> [!NOTE]
-> Versions prior to version 1903 don't support group policy.
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1903 [10.0.18362] and later |
+
-
-
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/Storage/ConfigStorageSenseRecycleBinCleanupThreshold
+```
+
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+
+When Storage Sense runs, it can delete files in the user’s Recycle Bin if they have been there for over a certain amount of days.
-> [!div class = "checklist"]
-> * Device
+If the group policy "Allow Storage Sense" is disabled, then this policy does not have any effect.
-
+Enabled:
+You must provide the minimum age threshold (in days) of a file in the Recycle Bin before Storage Sense will delete it. Supported values are: 0 - 365.
+If you set this value to zero, Storage Sense will not delete files in the user’s Recycle Bin. The default is 30 days.
-
-
-When Storage Sense runs, it can delete files in the user’s Recycle Bin if they've been there for over a certain number of days.
+Disabled or Not Configured:
+By default, Storage Sense will delete files in the user’s Recycle Bin that have been there for over 30 days. Users can configure this setting in Storage settings.
+
-If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy doesn't have any effect.
+
+
+
-If you enable this policy setting, you must provide the minimum age threshold (in days) of a file in the Recycle Bin before Storage Sense will delete it. Supported values are: 0–365.
+
+**Description framework properties**:
-If you set this value to zero, Storage Sense won't delete files in the user’s Recycle Bin. The default is 30 days.
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Allowed Values | Range: `[0-365]` |
+| Default Value | 30 |
+
-If you disable or don't configure this policy setting, Storage Sense will delete files in the user’s Recycle Bin which have been there for over 30 days by default. Users can configure this setting in Storage settings.
+
+**Group policy mapping**:
-
-
-ADMX Info:
-- GP Friendly name: *Configure Storage Sense Recycle Bin cleanup threshold*
-- GP name: *SS_ConfigStorageSenseRecycleBinCleanupThreshold*
-- GP path: *System/Storage Sense*
-- GP ADMX file name: *StorageSense.admx*
+| Name | Value |
+|:--|:--|
+| Name | SS_ConfigStorageSenseRecycleBinCleanupThreshold |
+| Friendly Name | Configure Storage Sense Recycle Bin cleanup threshold |
+| Location | Computer Configuration |
+| Path | System > Storage Sense |
+| Registry Key Name | Software\Policies\Microsoft\Windows\StorageSense |
+| ADMX File Name | StorageSense.admx |
+
-
-
+
+
+
-
-
+
-
-
+
+## EnhancedStorageDevices
-
-
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1703 [10.0.15063] and later |
+
-
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/Storage/EnhancedStorageDevices
+```
+
-
-**Storage/EnhancedStorageDevices**
-
-
-The table below shows the applicability of Windows:
-
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
+
+
This policy setting configures whether or not Windows will activate an Enhanced Storage device.
-If you enable this policy setting, Windows won't activate un-activated Enhanced Storage devices.
+If you enable this policy setting, Windows will not activate unactivated Enhanced Storage devices.
-If you disable or don't configure this policy setting, Windows will activate un-activated Enhanced Storage devices.
+If you disable or do not configure this policy setting, Windows will activate unactivated Enhanced Storage devices.
+
-
+
+
+
+
+
+**Description framework properties**:
+
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Add, Delete, Get, Replace |
+
+
+
> [!TIP]
-> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](../understanding-admx-backed-policies.md).
->
-> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](../understanding-admx-backed-policies.md#enabling-a-policy).
->
-> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
+> This is an ADMX-backed policy and requires SyncML format for configuration. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
-
-ADMX Info:
-- GP Friendly name: *Do not allow Windows to activate Enhanced Storage devices*
-- GP name: *TCGSecurityActivationDisabled*
-- GP path: *System/Enhanced Storage Access*
-- GP ADMX file name: *enhancedstorage.admx*
+**ADMX mapping**:
-
-
+| Name | Value |
+|:--|:--|
+| Name | TCGSecurityActivationDisabled |
+| Friendly Name | Do not allow Windows to activate Enhanced Storage devices |
+| Location | Computer Configuration |
+| Path | System > Enhanced Storage Access |
+| Registry Key Name | Software\Policies\Microsoft\Windows\EnhancedStorageDevices |
+| Registry Value Name | TCGSecurityActivationDisabled |
+| ADMX File Name | EnhancedStorage.admx |
+
-
+
+
+
-
-**Storage/RemovableDiskDenyWriteAccess**
+
-
-The table below shows the applicability of Windows:
+
+## RemovableDiskDenyWriteAccess
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1809 [10.0.17763] and later |
+
-
-
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/Storage/RemovableDiskDenyWriteAccess
+```
+
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+
+This policy setting denies write access to removable disks.
-> [!div class = "checklist"]
-> * Device
+If you enable this policy setting, write access is denied to this removable storage class.
-
+If you disable or do not configure this policy setting, write access is allowed to this removable storage class.
-
-
-If you enable this policy setting, write access is denied to this removable storage class. If you disable or don't configure this policy setting, write access is allowed to this removable storage class.
+Note: To require that users write data to BitLocker-protected storage, enable the policy setting "Deny write access to drives not protected by BitLocker," which is located in "Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives."
+
-> [!Note]
-> To require that users write data to BitLocker-protected storage, enable the policy setting "Deny write access to drives not protected by BitLocker," which is located in "Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives."
+
+
+
-Supported values for this policy are:
-- 0 - Disable
-- 1 - Enable
+
+**Description framework properties**:
-
-
-ADMX Info:
-- GP Friendly name: *Removable Disks: Deny write access*
-- GP name: *RemovableDisks_DenyWrite_Access_2*
-- GP element: *RemovableDisks_DenyWrite_Access_2*
-- GP path: *System/Removable Storage Access*
-- GP ADMX file name: *RemovableStorage.admx*
+| Property name | Property value |
+|:--|:--|
+| Format | int |
+| Access Type | Add, Delete, Get, Replace |
+| Default Value | 0 |
+
-
-
+
+**Allowed values**:
-
-
-Example for setting the device custom OMA-URI setting to enable this policy:
-To deny write access to removable storage within Intune’s custom profile, set OMA-URI to ```./Device/Vendor/MSFT/Policy/Config/Storage/RemovableDiskDenyWriteAccess```, Data type to Integer, and Value to 1.
+| Value | Description |
+|:--|:--|
+| 0 (Default) | Disabled. |
+| 1 | Enabled. |
+
-See [Use custom settings for Windows 10 devices in Intune](/intune/custom-settings-windows-10) for information on how to create custom profiles.
-
-
+
+**Group policy mapping**:
-
-
-
+| Name | Value |
+|:--|:--|
+| Name | RemovableDisks_DenyWrite_Access_2 |
+| Friendly Name | Removable Disks: Deny write access |
+| Location | Computer Configuration |
+| Path | System > Removable Storage Access |
+| Registry Key Name | Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} |
+| ADMX File Name | RemovableStorage.admx |
+
-
-**Storage/WPDDevicesDenyReadAccessPerDevice**
+
+
+
-
-The table below shows the applicability of Windows:
+
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+
+## WPDDevicesDenyReadAccessPerDevice
-
-
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/Storage/WPDDevicesDenyReadAccessPerDevice
+```
+
-> [!div class = "checklist"]
-> * Device
+
+
+This policy setting denies read access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices.
-
+If you enable this policy setting, read access is denied to this removable storage class.
-
-
-This policy will do the enforcement over the following protocols that are used by most portable devices, for example, mobile/IOS/Android:
+If you disable or do not configure this policy setting, read access is allowed to this removable storage class.
+
+
+
+
+
+This policy does enforcement over the following protocols that are used by most portable devices, for example, mobile/IOS/Android:
- Picture Transfer Protocol (PTP) over USB, IP, and Bluetooth.
- Media Transfer Protocol (MTP) over USB, IP, and Bluetooth.
- Mass Storage Class (MSC) over USB.
-To enable this policy, the minimum OS requirement is Windows 10, version 1809 and [KB5003217 (OS Build 17763.1971)](https://support.microsoft.com/en-us/topic/may-20-2021-kb5003217-os-build-17763-1971-preview-08687c95-0740-421b-a205-54aa2c716b46).
-
-If enabled, this policy will block end-user from Read access on any Windows Portal devices, for example, mobile/iOS/Android.
+
>[!NOTE]
-> WPD policy is not a reliable policy for removable storage - admin can not use WPD policy to block removable storage. For example, if an end-user is using an USB thumb drive under a WPD policy, the policy may block PTP/MTP/etc, but end-user can still browse the USB via explorer.
+> WPD policy isn't a reliable policy for removable storage. You can't use WPD policy to entirely block removable storage. For example, if a user inserts a USB drive to a device with a WPD policy, the policy may block PTP or MTP, but the user can still browse the drive in Windows Explorer.
-Supported values for this policy are:
-- Not configured
-- Enabled
-- Disabled
+
-
-
-ADMX Info:
-- GP Friendly name: *WPD Devices: Deny read access*
-- GP name: *WPDDevices_DenyRead_Access_2*
-- GP path: *System/Removable Storage Access*
-- GP ADMX file name: *RemovableStorage.admx*
+
+**Description framework properties**:
-
-
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Add, Delete, Get, Replace |
+
-
-
+
+> [!TIP]
+> This is an ADMX-backed policy and requires SyncML format for configuration. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
-
-
-
+**ADMX mapping**:
-
-**Storage/WPDDevicesDenyReadAccessPerUser**
+| Name | Value |
+|:--|:--|
+| Name | WPDDevices_DenyRead_Access |
+| Friendly Name | WPD Devices: Deny read access |
+| Location | Computer Configuration |
+| Path | System > Removable Storage Access |
+| Registry Key Name | Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33} |
+| Registry Value Name | Deny_Read |
+| ADMX File Name | RemovableStorage.admx |
+
-
-The table below shows the applicability of Windows:
+
+
+
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+
-
-
+
+## WPDDevicesDenyWriteAccessPerDevice
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
-> [!div class = "checklist"]
-> * User
+
+```Device
+./Device/Vendor/MSFT/Policy/Config/Storage/WPDDevicesDenyWriteAccessPerDevice
+```
+
-
+
+
+This policy setting denies write access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices.
-
-
-This policy will do the enforcement over the following protocols that are used by most portable devices, for example, mobile/IOS/Android:
+If you enable this policy setting, write access is denied to this removable storage class.
+
+If you disable or do not configure this policy setting, write access is allowed to this removable storage class.
+
+
+
+
+
+This policy does enforcement over the following protocols that are used by most portable devices, for example, mobile/IOS/Android:
- Picture Transfer Protocol (PTP) over USB, IP, and Bluetooth.
- Media Transfer Protocol (MTP) over USB, IP, and Bluetooth.
- Mass Storage Class (MSC) over USB.
-To enable this policy, the minimum OS requirement is Windows 10, version 1809 and [KB5003217 (OS Build 17763.1971)](https://support.microsoft.com/en-us/topic/may-20-2021-kb5003217-os-build-17763-1971-preview-08687c95-0740-421b-a205-54aa2c716b46).
-
-If enabled, this policy will block end-user from Read access on any Windows Portal devices, for example, mobile/iOS/Android.
+
>[!NOTE]
-> WPD policy is not a reliable policy for removable storage - admin can not use WPD policy to block removable storage. For example, if an end-user is using an USB thumb drive under a WPD policy, the policy may block PTP/MTP/etc, but end-user can still browse the USB via explorer.
+> WPD policy isn't a reliable policy for removable storage. You can't use WPD policy to entirely block removable storage. For example, if a user inserts a USB drive to a device with a WPD policy, the policy may block PTP or MTP, but the user can still browse the drive in Windows Explorer.
-Supported values for this policy are:
-- Not configured
-- Enabled
-- Disabled
+
-
-
-ADMX Info:
-- GP Friendly name: *WPD Devices: Deny read access*
-- GP name: *WPDDevices_DenyRead_Access_1*
-- GP path: *System/Removable Storage Access*
-- GP ADMX file name: *RemovableStorage.admx*
+
+**Description framework properties**:
-
-
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Add, Delete, Get, Replace |
+
-
-
+
+> [!TIP]
+> This is an ADMX-backed policy and requires SyncML format for configuration. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
-
-
-
+**ADMX mapping**:
-
-**Storage/WPDDevicesDenyWriteAccessPerDevice**
+| Name | Value |
+|:--|:--|
+| Name | WPDDevices_DenyWrite_Access |
+| Friendly Name | WPD Devices: Deny write access |
+| Location | Computer Configuration |
+| Path | System > Removable Storage Access |
+| Registry Key Name | Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33} |
+| Registry Value Name | Deny_Write |
+| ADMX File Name | RemovableStorage.admx |
+
-
-The table below shows the applicability of Windows:
+
+
+
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+
-
-
+
+## WPDDevicesDenyReadAccessPerUser
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :x: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
-> [!div class = "checklist"]
-> * Device
+
+```User
+./User/Vendor/MSFT/Policy/Config/Storage/WPDDevicesDenyReadAccessPerUser
+```
+
-
+
+
+This policy setting denies read access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices.
-
-
-This policy will do the enforcement over the following protocols that are used by most portable devices, for example, mobile/IOS/Android:
+If you enable this policy setting, read access is denied to this removable storage class.
+
+If you disable or do not configure this policy setting, read access is allowed to this removable storage class.
+
+
+
+
+
+This policy does enforcement over the following protocols that are used by most portable devices, for example, mobile/IOS/Android:
- Picture Transfer Protocol (PTP) over USB, IP, and Bluetooth.
- Media Transfer Protocol (MTP) over USB, IP, and Bluetooth.
- Mass Storage Class (MSC) over USB.
-To enable this policy, the minimum OS requirement is Windows 10, version 1809 and [KB5003217 (OS Build 17763.1971)](https://support.microsoft.com/en-us/topic/may-20-2021-kb5003217-os-build-17763-1971-preview-08687c95-0740-421b-a205-54aa2c716b46).
-
-If enabled, this policy will block end-user from Write access on any Windows Portal devices, for example, mobile/iOS/Android.
+
>[!NOTE]
-> WPD policy is not a reliable policy for removable storage - admin can not use WPD policy to block removable storage. For example, if an end-user is using an USB thumb drive under a WPD policy, the policy may block PTP/MTP/etc, but end-user can still browse the USB via explorer.
+> WPD policy isn't a reliable policy for removable storage. You can't use WPD policy to entirely block removable storage. For example, if a user inserts a USB drive to a device with a WPD policy, the policy may block PTP or MTP, but the user can still browse the drive in Windows Explorer.
-Supported values for this policy are:
-- Not configured
-- Enabled
-- Disabled
+
-
-
-ADMX Info:
-- GP Friendly name: *WPD Devices: Deny write access*
-- GP name: *WPDDevices_DenyWrite_Access_2*
-- GP path: *System/Removable Storage Access*
-- GP ADMX file name: *RemovableStorage.admx*
+
+**Description framework properties**:
-
-
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Add, Delete, Get, Replace |
+
-
-
+
+> [!TIP]
+> This is an ADMX-backed policy and requires SyncML format for configuration. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
-
-
-
+**ADMX mapping**:
-
-**Storage/WPDDevicesDenyWriteAccessPerUser**
+| Name | Value |
+|:--|:--|
+| Name | WPDDevices_DenyRead_Access |
+| Friendly Name | WPD Devices: Deny read access |
+| Location | User Configuration |
+| Path | System > Removable Storage Access |
+| Registry Key Name | Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33} |
+| Registry Value Name | Deny_Read |
+| ADMX File Name | RemovableStorage.admx |
+
-
-The table below shows the applicability of Windows:
+
+
+
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|No|No|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+
-
-
+
+## WPDDevicesDenyWriteAccessPerUser
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+
+| Scope | Editions | Applicable OS |
+|:--|:--|:--|
+| :x: Device
:heavy_check_mark: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
+
-> [!div class = "checklist"]
-> * User
+
+```User
+./User/Vendor/MSFT/Policy/Config/Storage/WPDDevicesDenyWriteAccessPerUser
+```
+
-
+
+
+This policy setting denies write access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices.
-
-
-This policy will do the enforcement over the following protocols that are used by most portable devices, for example, mobile/IOS/Android:
+If you enable this policy setting, write access is denied to this removable storage class.
+
+If you disable or do not configure this policy setting, write access is allowed to this removable storage class.
+
+
+
+
+
+This policy does enforcement over the following protocols that are used by most portable devices, for example, mobile/IOS/Android:
- Picture Transfer Protocol (PTP) over USB, IP, and Bluetooth.
- Media Transfer Protocol (MTP) over USB, IP, and Bluetooth.
- Mass Storage Class (MSC) over USB.
-To enable this policy, the minimum OS requirement is Windows 10, version 1809 and [KB5003217 (OS Build 17763.1971)](https://support.microsoft.com/en-us/topic/may-20-2021-kb5003217-os-build-17763-1971-preview-08687c95-0740-421b-a205-54aa2c716b46).
-
-If enabled, this policy will block end-user from Write access on any Windows Portal devices, for example, mobile/iOS/Android.
+
>[!NOTE]
-> WPD policy is not a reliable policy for removable storage - admin can not use WPD policy to block removable storage. For example, if an end-user is using an USB thumb drive under a WPD policy, the policy may block PTP/MTP/etc, but end-user can still browse the USB via explorer.
+> WPD policy isn't a reliable policy for removable storage. You can't use WPD policy to entirely block removable storage. For example, if a user inserts a USB drive to a device with a WPD policy, the policy may block PTP or MTP, but the user can still browse the drive in Windows Explorer.
-Supported values for this policy are:
-- Not configured
-- Enabled
-- Disabled
+
-
-
-ADMX Info:
-- GP Friendly name: *WPD Devices: Deny write access*
-- GP name: *WPDDevices_DenyWrite_Access_1*
-- GP path: *System/Removable Storage Access*
-- GP ADMX file name: *RemovableStorage.admx*
+
+**Description framework properties**:
-
-
+| Property name | Property value |
+|:--|:--|
+| Format | chr (string) |
+| Access Type | Add, Delete, Get, Replace |
+
-
-
+
+> [!TIP]
+> This is an ADMX-backed policy and requires SyncML format for configuration. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
-
-
-
+**ADMX mapping**:
-
-
-**StorageHealthMonitor/DisableStorageHealthMonitor**
+| Name | Value |
+|:--|:--|
+| Name | WPDDevices_DenyWrite_Access |
+| Friendly Name | WPD Devices: Deny write access |
+| Location | User Configuration |
+| Path | System > Removable Storage Access |
+| Registry Key Name | Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33} |
+| Registry Value Name | Deny_Write |
+| ADMX File Name | RemovableStorage.admx |
+
-
-The table below shows the applicability of Windows:
+
+
+
-|Edition|Windows 10|Windows 11|
-|--- |--- |--- |
-|Home|Yes|Yes|
-|Pro|Yes|Yes|
-|Windows SE|No|Yes|
-|Business|Yes|Yes|
-|Enterprise|Yes|Yes|
-|Education|Yes|Yes|
+
-> [!NOTE]
-> Versions prior to 21H2 will not support this policy
+
+
+
-
-
+
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
+## Related articles
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-Allows disable of Storage Health Monitor.
-
-Supported value type is integer.
-
-
-
-
-The following list shows the supported values:
-
-- 0 - Storage Health Monitor is Enabled.
-- 1 - Storage Health Monitor is Disabled.
-
-
-
-
-
-
-
-
-
-## Related topics
-
-[Policy configuration service provider](policy-configuration-service-provider.md)
\ No newline at end of file
+[Policy configuration service provider](policy-configuration-service-provider.md)