mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-18 11:53:37 +00:00
Sweep 2
This commit is contained in:
Alekhya Jupudi
@ -243,92 +243,137 @@ On a desktop computer, navigate to **Settings** > **Accounts** > **Work ac
|
||||
New-Item -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\SharedPC\Exemptions\$sid" -Force
|
||||
```
|
||||
|
||||
|
||||
## Policies set by shared PC mode
|
||||
|
||||
Shared PC mode sets local group policies to configure the device. Some of these are configurable using the shared pc mode options.
|
||||
|
||||
> [!IMPORTANT]
|
||||
> It is not recommended to set additional policies on PCs configured for **Shared PC Mode**. The shared PC mode has been optimized to be fast and reliable over time with minimal to no manual maintenance required.
|
||||
|
||||
<table border="1">
|
||||
### Admin Templates > Control Panel > Personalization
|
||||
|
||||
<tr><th><p>Policy name</p></th><th><p>Value</p></th><th><p>When set?</p></th></tr> </thead>
|
||||
<tbody>
|
||||
<tr><td colspan="3"><p><strong>Admin Templates</strong> > <strong>Control Panel</strong> > <strong>Personalization</strong></p></td></tr>
|
||||
<tr><td><p>Prevent enabling lock screen slide show</p></td><td><p>Enabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr><td><p>Prevent changing lock screen and logon image</p></td><td><p>Enabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr><td colspan="3"><p><strong>Admin Templates</strong> > <strong>System</strong> > <strong>Power Management</strong> > <strong>Button Settings</strong></p></td></tr>
|
||||
<tr><td><p>Select the Power button action (plugged in)</p></td><td><p>Sleep</p></td><td><p>SetPowerPolicies=True</p></td></tr>
|
||||
<tr><td><p>Select the Power button action (on battery)</p></td><td><p>Sleep</p></td><td><p>SetPowerPolicies=True</p></td></tr>
|
||||
<tr><td><p>Select the Sleep button action (plugged in)</p></td><td><p>Sleep</p></td><td><p>SetPowerPolicies=True</p></td></tr>
|
||||
<tr><td><p>Select the lid switch action (plugged in)</p></td><td><p>Sleep</p></td><td><p>SetPowerPolicies=True</p></td></tr>
|
||||
<tr><td><p>Select the lid switch action (on battery)</p></td><td><p>Sleep</p></td><td><p>SetPowerPolicies=True</p></td></tr>
|
||||
<tr><td colspan="3"><p><strong>Admin Templates</strong> > <strong>System</strong> > <strong>Power Management</strong> > <strong>Sleep Settings</strong></p></td></tr>
|
||||
<tr><td><p>Require a password when a computer wakes (plugged in)</p></td><td><p>Enabled</p></td><td><p>SignInOnResume=True</p></td></tr>
|
||||
<tr><td><p>Require a password when a computer wakes (on battery)</p></td><td><p>Enabled</p></td><td><p>SignInOnResume=True</p></td></tr>
|
||||
<tr><td><p>Specify the system sleep timeout (plugged in)</p></td><td><p><em>SleepTimeout</em></p></td><td><p>SetPowerPolicies=True</p></td></tr>
|
||||
<tr><td><p>Specify the system sleep timeout (on battery)</p></td><td><p><em>SleepTimeout</em></p></td><td><p>SetPowerPolicies=True</p></td></tr>
|
||||
<tr> <td> <p>Turn off hybrid sleep (plugged in)</p></td> <td> <p>Enabled</p></td><td><p>SetPowerPolicies=True</p></td></tr>
|
||||
<tr> <td> <p>Turn off hybrid sleep (on battery)</p></td> <td> <p>Enabled</p></td><td><p>SetPowerPolicies=True</p></td></tr>
|
||||
<tr> <td> <p>Specify the unattended sleep timeout (plugged in)</p></td> <td> <p><em>SleepTimeout</em></p> </td><td><p>SetPowerPolicies=True</p></td></tr>
|
||||
<tr> <td> <p>Specify the unattended sleep timeout (on battery)</p></td> <td> <p><em>SleepTimeout</em></p> </td><td><p>SetPowerPolicies=True</p></td></tr>
|
||||
<tr> <td> <p>Allow standby states (S1-S3) when sleeping (plugged in)</p></td> <td> <p>Enabled</p></td><td><p>SetPowerPolicies=True</p></td></tr>
|
||||
<tr> <td> <p>Allow standby states (S1-S3) when sleeping (on battery)</p></td> <td> <p>Enabled</p></td> <td><p>SetPowerPolicies=True</p></td></tr>
|
||||
<tr> <td> <p>Specify the system hibernate timeout (plugged in)</p></td> <td> <p>Enabled, 0</p></td><td><p>SetPowerPolicies=True</p></td></tr>
|
||||
<tr> <td> <p>Specify the system hibernate timeout (on battery)</p></td> <td> <p>Enabled, 0</p></td><td><p>SetPowerPolicies=True</p></td></tr>
|
||||
<tr> <td colspan="3"> <p><strong>Admin Templates</strong>><strong>System</strong>><strong>Power Management</strong>><strong>Video and Display Settings</strong></p></td></tr>
|
||||
<tr> <td> <p>Turn off the display (plugged in)</p></td> <td> <p><em>SleepTimeout</em></p> </td></td><td><p>SetPowerPolicies=True</p></td></tr>
|
||||
<tr> <td> <p>Turn off the display (on battery</p></td> <td> <p><em>SleepTimeout</em></p> </td></td><td><p>SetPowerPolicies=True</p></td></tr>
|
||||
<tr> <td colspan="3"> <p><strong>Admin Templates</strong>><strong>System</strong>><strong>Power Management</strong>><strong>Energy Saver Settings</strong></p></td></tr>
|
||||
<tr><td>Energy Saver Battery Threshold (on battery)</td><td>70</td><td>SetPowerPolicies=True</td></tr>
|
||||
<tr> <td colspan="3"> <p><strong>Admin Templates</strong>><strong>System</strong>><strong>Logon</strong></p></td></tr>
|
||||
<tr> <td> <p>Show first sign-in animation</p></td> <td> <p>Disabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td> <p>Hide entry points for Fast User Switching</p></td> <td> <p>Enabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td> <p>Turn on convenience PIN sign-in</p></td> <td> <p>Disabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td> <p>Turn off picture password sign-in</p></td> <td> <p>Enabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td> <p>Turn off app notification on the lock screen</p></td> <td> <p>Enabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td> <p>Allow users to select when a password is required when resuming from connected standby</p></td> <td> <p>Disabled</p></td><td><p>SignInOnResume=True</p></td>
|
||||
</tr>
|
||||
<tr> <td> <p>Block user from showing account details on sign-in</p></td> <td> <p>Enabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td colspan="3"> <p><strong>Admin Templates</strong>><strong>System</strong>><strong>User Profiles</strong></p></td></tr>
|
||||
<tr> <td> <p>Turn off the advertising ID</p></td> <td> <p>Enabled</p></td><td><p>SetEduPolicies=True</p></td></tr>
|
||||
<tr> <td colspan="3"> <p><strong>Admin Templates</strong>><strong>Windows Components </strong></p></td></tr>
|
||||
<tr> <td> <p>Do not show Windows Tips </p> </td> <td> <p>Enabled</p></td><td><p>SetEduPolicies=True</p></td></tr>
|
||||
<tr> <td> <p>Turn off Microsoft consumer experiences </p></td> <td> <p>Enabled</p></td><td><p>SetEduPolicies=True</p></td></tr>
|
||||
<tr> <td> <p>Microsoft Passport for Work</p></td> <td> <p>Disabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td> <p>Prevent the usage of OneDrive for file storage</p></td> <td> <p>Enabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td colspan="3"> <p><strong>Admin Templates</strong>><strong>Windows Components</strong>><strong>Biometrics</strong></p></td></tr>
|
||||
<tr> <td> <p>Allow the use of biometrics</p></td> <td> <p>Disabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td> <p>Allow users to log on using biometrics</p></td> <td> <p>Disabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td> <p>Allow domain users to log on using biometrics</p></td> <td> <p>Disabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td colspan="3"> <p><strong>Admin Templates</strong>><strong>Windows Components</strong>><strong>Data Collection and Preview Builds</strong></p></td></tr>
|
||||
<tr> <td> <p>Toggle user control over Insider builds</p></td> <td> <p>Disabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td> <p>Disable pre-release features or settings</p></td> <td> <p>Disabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td> <p>Do not show feedback notifications</p></td> <td> <p>Enabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr><td>Allow Telemetry</td><td>Basic, 0</td><td>SetEduPolicies=True</td></tr>
|
||||
<tr> <td colspan="3"> <p><strong>Admin Templates</strong>><strong>Windows Components</strong>><strong>File Explorer</strong></p></td></tr>
|
||||
<tr> <td> <p>Show lock in the user tile menu</p></td> <td> <p>Disabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td colspan="3"> <p><strong>Admin Templates</strong>><strong>Windows Components</strong>><strong>Maintenance Scheduler</strong></p></td></tr>
|
||||
<tr> <td> <p>Automatic Maintenance Activation Boundary</p></td> <td> <p><em>MaintenanceStartTime</em></p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td> <p>Automatic Maintenance Random Delay</p></td> <td> <p>Enabled, 2 hours</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td> <p>Automatic Maintenance WakeUp Policy</p></td> <td> <p>Enabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td colspan="3"> <p><strong>Admin Templates</strong>><strong>Windows Components</strong>><strong>Windows Hello for Business</strong></p></td></tr>
|
||||
<tr> <td> <p>Use phone sign-in</p></td> <td> <p>Disabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td> <p>Use Windows Hello for Business</p></td> <td> <p>Disabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td> <p>Use biometrics</p></td> <td> <p>Disabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td colspan="3"> <p><strong>Admin Templates</strong>><strong>Windows Components</strong>><strong>OneDrive</strong></p></td></tr>
|
||||
<tr> <td> <p>Prevent the usage of OneDrive for file storage</p></td> <td> <p>Enabled</p></td><td><p>Always</p></td></tr>
|
||||
<tr> <td colspan="3"> <p><strong>Windows Settings</strong>><strong>Security Settings</strong>><strong>Local Policies</strong>><strong>Security Options</strong></p></td>
|
||||
</tr>
|
||||
<tr> <td> <p>Interactive logon: Do not display last user name</p> </td> <td> <p>Enabled, Disabled when account model is only guest</p> </td><td><p>Always</p></td></tr>
|
||||
<tr> <td> <p>Interactive logon: Sign-in last interactive user automatically after a system-initiated restart</p> </td> <td> <p>Disabled</p> </td> <td><p>Always</p></td>
|
||||
</tr>
|
||||
<tr> <td> <p>Shutdown: Allow system to be shut down without having to log on</p> </td> <td> <p>Disabled</p> </td><td><p>Always</p></td></tr>
|
||||
<tr> <td> <p>User Account Control: Behavior of the elevation prompt for standard users</p> </td> <td> <p>Auto deny</p> </td><td><p>Always</p></td></tr>
|
||||
</tbody>
|
||||
</table> </br></br>
|
||||
|Policy Name| Value|When set?|
|
||||
|--- |--- |--- |
|
||||
|Prevent enabling lock screen slide show|Enabled|Always|
|
||||
|Prevent changing lock screen and logon image|Enabled|Always|
|
||||
|
||||
### Admin Templates > System > Power Management > Button Settings
|
||||
|
||||
|Policy Name| Value|When set?|
|
||||
|--- |--- |--- |
|
||||
|Select the Power button action (plugged in)|Sleep|SetPowerPolicies=True|
|
||||
|Select the Power button action (on battery)|Sleep|SetPowerPolicies=True|
|
||||
|Select the Sleep button action (plugged in)|Sleep|SetPowerPolicies=True|
|
||||
|Select the lid switch action (plugged in)|Sleep|SetPowerPolicies=True|
|
||||
|Select the lid switch action (on battery)|Sleep|SetPowerPolicies=True|
|
||||
|
||||
### Admin Templates > System > Power Management > Sleep Settings
|
||||
|
||||
|Policy Name| Value|When set?|
|
||||
|--- |--- |--- |
|
||||
|Require a password when a computer wakes (plugged in)|Enabled|SignInOnResume=True|
|
||||
|Require a password when a computer wakes (on battery)|Enabled|SignInOnResume=True|
|
||||
|Specify the system sleep timeout (plugged in)|*SleepTimeout*|SetPowerPolicies=True|
|
||||
|Specify the system sleep timeout (on battery)|*SleepTimeout*|SetPowerPolicies=True|
|
||||
|Turn off hybrid sleep (plugged in)|Enabled|SetPowerPolicies=True|
|
||||
|Turn off hybrid sleep (on battery)|Enabled|SetPowerPolicies=True|
|
||||
|Specify the unattended sleep timeout (plugged in)|*SleepTimeout*|SetPowerPolicies=True|
|
||||
|Specify the unattended sleep timeout (on battery)|*SleepTimeout*|SetPowerPolicies=True|
|
||||
|Allow standby states (S1-S3) when sleeping (plugged in)|Enabled|SetPowerPolicies=True|
|
||||
|Allow standby states (S1-S3) when sleeping (on battery)|Enabled |SetPowerPolicies=True|
|
||||
|Specify the system hibernate timeout (plugged in)|Enabled, 0|SetPowerPolicies=True|
|
||||
|Specify the system hibernate timeout (on battery)|Enabled, 0|SetPowerPolicies=True|
|
||||
|
||||
### Admin Templates>System>Power Management>Video and Display Settings
|
||||
|
||||
|Policy Name| Value|When set?|
|
||||
|--- |--- |--- |
|
||||
|Turn off the display (plugged in)|*SleepTimeout*|SetPowerPolicies=True|
|
||||
|Turn off the display (on battery|*SleepTimeout*|SetPowerPolicies=True|
|
||||
|
||||
### Admin Templates>System>Power Management>Energy Saver Settings
|
||||
|
||||
|Policy Name| Value|When set?|
|
||||
|--- |--- |--- |
|
||||
|Energy Saver Battery Threshold (on battery)|70|SetPowerPolicies=True|
|
||||
|
||||
### Admin Templates>System>Logon
|
||||
|
||||
|Policy Name| Value|When set?|
|
||||
|--- |--- |--- |
|
||||
|Show first sign-in animation|Disabled|Always|
|
||||
|Hide entry points for Fast User Switching|Enabled|Always|
|
||||
|Turn on convenience PIN sign-in|Disabled|Always|
|
||||
|Turn off picture password sign-in|Enabled|Always|
|
||||
|Turn off app notification on the lock screen|Enabled|Always|
|
||||
|Allow users to select when a password is required when resuming from connected standby|Disabled|SignInOnResume=True|
|
||||
|Block user from showing account details on sign-in|Enabled|Always|
|
||||
|
||||
### Admin Templates>System>User Profiles
|
||||
|
||||
|Policy Name| Value|When set?|
|
||||
|--- |--- |--- |
|
||||
|Turn off the advertising ID|Enabled|SetEduPolicies=True|
|
||||
|
||||
### Admin Templates>Windows Components
|
||||
|
||||
|Policy Name| Value|When set?|
|
||||
|--- |--- |--- |
|
||||
|Do not show Windows Tips |Enabled|SetEduPolicies=True|
|
||||
|Turn off Microsoft consumer experiences |Enabled|SetEduPolicies=True|
|
||||
|Microsoft Passport for Work|Disabled|Always|
|
||||
|Prevent the usage of OneDrive for file storage|Enabled|Always|
|
||||
|
||||
### Admin Templates>Windows Components>Biometrics
|
||||
|
||||
|Policy Name| Value|When set?|
|
||||
|--- |--- |--- |
|
||||
|Allow the use of biometrics|Disabled|Always|
|
||||
|Allow users to log on using biometrics|Disabled|Always|
|
||||
|Allow domain users to log on using biometrics|Disabled|Always|
|
||||
|
||||
### Admin Templates>Windows Components>Data Collection and Preview Builds
|
||||
|
||||
|Policy Name| Value|When set?|
|
||||
|--- |--- |--- |
|
||||
|Toggle user control over Insider builds|Disabled|Always|
|
||||
|Disable pre-release features or settings|Disabled|Always|
|
||||
|Do not show feedback notifications|Enabled|Always|
|
||||
|Allow Telemetry|Basic, 0|SetEduPolicies=True|
|
||||
|
||||
### Admin Templates>Windows Components>File Explorer
|
||||
|
||||
|Policy Name| Value|When set?|
|
||||
|--- |--- |--- |
|
||||
|Show lock in the user tile menu|Disabled|Always|
|
||||
|
||||
### Admin Templates>Windows Components>Maintenance Scheduler
|
||||
|
||||
|Policy Name| Value|When set?|
|
||||
|--- |--- |--- |
|
||||
|Automatic Maintenance Activation Boundary|*MaintenanceStartTime*|Always|
|
||||
|Automatic Maintenance Random Delay|Enabled, 2 hours|Always|
|
||||
|Automatic Maintenance WakeUp Policy|Enabled|Always|
|
||||
|
||||
### Admin Templates>Windows Components>Windows Hello for Business
|
||||
|
||||
|Policy Name| Value|When set?|
|
||||
|--- |--- |--- |
|
||||
|Use phone sign-in|Disabled|Always|
|
||||
|Use Windows Hello for Business|Disabled|Always|
|
||||
|Use biometrics|Disabled|Always|
|
||||
|
||||
### Admin Templates>Windows Components>OneDrive
|
||||
|
||||
|Policy Name| Value|When set?|
|
||||
|--- |--- |--- |
|
||||
|Prevent the usage of OneDrive for file storage|Enabled|Always|
|
||||
|
||||
### Windows Settings>Security Settings>Local Policies>Security Options
|
||||
|
||||
|Policy Name| Value|When set?|
|
||||
|--- |--- |--- |
|
||||
|Interactive logon: Do not display last user name|Enabled, Disabled when account model is only guest|Always|
|
||||
|Interactive logon: Sign-in last interactive user automatically after a system-initiated restart|Disabled |Always|
|
||||
|Shutdown: Allow system to be shut down without having to log on|Disabled|Always|
|
||||
|User Account Control: Behavior of the elevation prompt for standard users|Auto deny|Always|
|
||||
Reference in New Issue
Block a user