From 66eb7edc6db637f776c632eabcea00c4e6e787aa Mon Sep 17 00:00:00 2001 From: MandiOhlinger Date: Mon, 22 Nov 2021 16:08:01 -0500 Subject: [PATCH] added new article --- education/windows/TOC.yml | 6 +- .../windows/windows-11-se-settings-list.md | 67 +++++++++++++++++++ 2 files changed, 72 insertions(+), 1 deletion(-) create mode 100644 education/windows/windows-11-se-settings-list.md diff --git a/education/windows/TOC.yml b/education/windows/TOC.yml index b812d479ae..3a592b8263 100644 --- a/education/windows/TOC.yml +++ b/education/windows/TOC.yml @@ -1,5 +1,9 @@ - name: Windows 11 SE for Education - href: windows-11-se-overview.md + items: + - name: Overview + href: windows-11-se-overview.md + - name: Settings and CSP list + href: windows-11-se-settings-list.md - name: Windows 10 for Education href: index.md items: diff --git a/education/windows/windows-11-se-settings-list.md b/education/windows/windows-11-se-settings-list.md new file mode 100644 index 0000000000..2bc1a56fd1 --- /dev/null +++ b/education/windows/windows-11-se-settings-list.md @@ -0,0 +1,67 @@ +--- +title: Windows 11 SE settings list +description: Windows 11 SE automatically configures settings in the operating system. Learn more about the settings you can control and manage, and the settings you can't change. +ms.reviewer: +manager: dougeby +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: mobile +ms.author: mandia +author: MandiOhlinger +ms.localizationpriority: medium +ms.topic: article +--- + +# Windows 11 SE for Education settings list + +**Applies to**: + +- Windows 11 SE +- Microsoft Intune for Education + +Windows 11 SE automatically configures settings and features in the operating system. These settings use the Configuration Service Provider (CSPs) provided by Microsoft. You can use an MDM provider to configure these settings. + +This article lists the settings automatically configured. For more information on Windows 11 SE, see [Windows 11 SE for Education overview](windows-11-se-overview.md). + +## Settings that can be changed + +The following table lists and describes the settings that can be changed by administrators. + +| Setting | Description | +| --- | --- | +| Block manual unenrollment | Default: Blocked

Users can't unenroll their devices from device management services. | +| Allow option to Show Network | Default: Allowed

Gives users the option to see the **Show Network** folder in File Explorer. | +| Allow option to Show This PC | Default: Allowed

Gives user the option to see the **Show This PC** folder in File Explorer. | +| Set Allowed Folder location | Default folders: Documents, Desktop, Pictures, and Downloads

Gives user access to these folders. | +| Set Allowed Storage Locations | Default: Blocks Local Drives and Network Drives

Blocks user access to these storage locations. | +| Allow News and Interests | Default: Hide

Hides Widgets. | +| Disable advertising ID | Default: Disabled

Blocks apps from using usage data to tailor advertisements.

[Privacy/DisableAdvertisingId](/windows/client-management/mdm/policy-csp-privacy#privacy-disableadvertisingid) | +| Visible settings pages | Default:

| +| Enable App Install Control | Default: Turned On

Users can’t download apps from the internet. | +| Configure Storage Sense Cloud Content Dehydration Threshold | Default: 30 days

If a file hasn’t been opened in 30 days, it becomes an online-only file. Online-only files can be opened when there's an internet connection. When an online-only file is opened on a device, it downloads and becomes locally available on that device. The file is available until it's unopened for the specified number of days, and becomes online-only again.

[Storage/ConfigStorageSenseCloudContentDehydrationThreshold CSP](/windows/client-management/mdm/policy-csp-storage#storage-configstoragesensecloudcontentdehydrationthreshold) | +| Allow Telemetry | Default: Required Telemetry Only

Sends only basic device info, including quality-related data, app compatibility, and similar data to keep the device secure and up-to-date.

[System/AllowTelemetry CSP](/windows/client-management/mdm/policy-csp-system#system-allowtelemetry) | +| Allow Experimentation | Default: Disabled

Microsoft can't experiment with the product to study user preferences or device behavior.

[System/AllowExperimentation CSP](/windows/client-management/mdm/policy-csp-system#system-allowexperimentation) | +| Block external extensions | Default: Blocked

In Microsoft Edge, users can't install external extensions. | +| Configure new tab page | Default: `Office.com`

In Microsoft Edge, the new tab page defaults to `office.com`. | +| Configure homepage | Default: `Office.com`

In Microsoft Edge, the homepage defaults to `office.com`. | +| Prevent SmartScreen prompt override | Default: Enabled

In Microsoft Edge, users can't override Windows Defender SmartScreen warnings. | + +## Settings that can't be changed + +The following settings can't be changed. + +| Category | Description | +| --- | --- | +| Visible Folders in File Explorer | By default, the Desktop, Downloads, Documents, and Pictures folders are visible to users in File Explorer. Users can make other folders, like **This PC**, visible in **View** > **Options**. | +| Launch Windows Maximized | All Windows are opened in the maximized view. | +| Windows Snapping | Windows snapping is limited to two Windows. | +| Allowed Account Types | Microsoft accounts and Azure AD accounts are allowed. | +| Virtual Desktops | Virtual Desktops are blocked. | +| Microsoft Store | The Microsoft Store is blocked. | +| Administrative tools | Administrative tools, such as the command prompt and Windows PowerShell, can't be opened. Windows PowerShell scripts deployed using Microsoft Endpoint Manager can run. | +| Apps | Only certain apps are allowed to run on Windows 11 SE. For more info on what apps can run on Windows 11 SE, see [Windows 11 SE for Education overview](windows-11-se-overview.md). | + +## Next steps + +[Windows 11 SE for Education overview](windows-11-se-overview.md)