diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index dd4e4d483f..dfbdfefcc2 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -19074,7 +19074,24 @@ "source_path": "windows/deployment/update/change-history-for-update-windows-10.md", "redirect_url": "/windows/deployment/deploy-whats-new", "redirect_document_id": true - } + }, + { + "source_path": "windows/client-management/mdm/policy-csp-admx-windowsanytimeupgrade.md", + "redirect_url": "/windows/client-management/mdm/policy-csp-admx-wordwheel", + "redirect_document_id": true + + }, + { + "source_path": "windows/client-management/mdm/policy-csp-admx-windowsfileprotection.md", + "redirect_url": "/windows/client-management/mdm/policy-csp-admx-mobilepcpresentationsettings", + "redirect_document_id": true + + }, + { + "source_path": "windows/client-management/mdm/policy-csp-admx-skydrive.md", + "redirect_url": "/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools", + "redirect_document_id": true + } ] } diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 93d1598529..6256ffe15a 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -33,6 +33,10 @@ ms.date: 10/08/2020 - [ADMX_AddRemovePrograms/NoServices](./policy-csp-admx-addremoveprograms.md#admx-addremoveprograms-noservices) - [ADMX_AddRemovePrograms/NoSupportInfo](./policy-csp-admx-addremoveprograms.md#admx-addremoveprograms-nosupportinfo) - [ADMX_AddRemovePrograms/NoWindowsSetupPage](./policy-csp-admx-addremoveprograms.md#admx-addremoveprograms-nowindowssetuppage) +- [ADMX_AdmPwd/POL_AdmPwd_DontAllowPwdExpirationBehindPolicy](./policy-csp-admx-admpwd.md#admx-admpwd-pol_admpwd_dontallowpwdexpirationbehindpolicy) +- [ADMX_AdmPwd/POL_AdmPwd_Enabled](./policy-csp-admx-admpwd.md#admx-admpwd-pol_admpwd_enabled) +- [ADMX_AdmPwd/POL_AdmPwd_AdminName](./policy-csp-admx-admpwd.md#admx-admpwd-pol_admpwd_adminname) +- [ADMX_AdmPwd/POL_AdmPwd](./policy-csp-admx-admpwd.md#admx-admpwd-pol_admpwd) - [ADMX_AppCompat/AppCompatPrevent16BitMach](./policy-csp-admx-appcompat.md#admx-appcompat-appcompatprevent16bitmach) - [ADMX_AppCompat/AppCompatRemoveProgramCompatPropPage](./policy-csp-admx-appcompat.md#admx-appcompat-appcompatremoveprogramcompatproppage) - [ADMX_AppCompat/AppCompatTurnOffApplicationImpactTelemetry](./policy-csp-admx-appcompat.md#admx-appcompat-appcompatturnoffapplicationimpacttelemetry) @@ -658,6 +662,10 @@ ms.date: 10/08/2020 - [ADMX_MMCSnapins/MMC_WiredNetworkPolicy](./policy-csp-admx-mmcsnapins.md#admx-mmcsnapins-mmc-wirednetworkpolicy) - [ADMX_MMCSnapins/MMC_WirelessMon](./policy-csp-admx-mmcsnapins.md#admx-mmcsnapins-mmc-wirelessmon) - [ADMX_MMCSnapins/MMC_WirelessNetworkPolicy](./policy-csp-admx-mmcsnapins.md#admx-mmcsnapins-mmc-wirelessnetworkpolicy) +- [ADMX_MobilePCMobilityCenter/MobilityCenterEnable_1](./policy-csp-admx-mobilepcmobilitycenter.md#admx-mobilepcmobilitycenter-mobilitycenterenable_1) +- [ADMX_MobilePCMobilityCenter/MobilityCenterEnable_2](./policy-csp-admx-mobilepcmobilitycenter.md#admx-mobilepcmobilitycenter-mobilitycenterenable_2) +- [ADMX_MobilePCPresentationSettings/PresentationSettingsEnable_1](./policy-csp-admx-mobilepcpresentationsettings.md#admx-mobilepcpresentationsettings-presentationsettingsenable_1) +- [ADMX_MobilePCPresentationSettings/PresentationSettingsEnable_2](./policy-csp-admx-mobilepcpresentationsettings.md#admx-mobilepcpresentationsettings-presentationsettingsenable_2) - [ADMX_MSAPolicy/IncludeMicrosoftAccount_DisableUserAuthCmdLine](./policy-csp-admx-msapolicy.md#admx-msapolicy-microsoftaccount-disableuserauth) - [ADMX_msched/ActivationBoundaryPolicy](./policy-csp-admx-msched.md#admx-msched-activationboundarypolicy) - [ADMX_msched/RandomDelayPolicy](./policy-csp-admx-msched.md#admx-msched-randomdelaypolicy) @@ -688,6 +696,7 @@ ms.date: 10/08/2020 - [ADMX_MSI/SafeForScripting](./policy-csp-admx-msi.md#admx-msi-safeforscripting) - [ADMX_MSI/SearchOrder](./policy-csp-admx-msi.md#admx-msi-searchorder) - [ADMX_MSI/TransformsSecure](./policy-csp-admx-msi.md#admx-msi-transformssecure) +- [ADMX_MsiFileRecovery/WdiScenarioExecutionPolicy](./policy-csp-admx-msifilerecovery.md#admx-msifilerecovery-wdiscenarioexecutionpolicy) - [ADMX_nca/CorporateResources](./policy-csp-admx-nca.md#admx-nca-corporateresources) - [ADMX_nca/CustomCommands](./policy-csp-admx-nca.md#admx-nca-customcommands) - [ADMX_nca/DTEs](./policy-csp-admx-nca.md#admx-nca-dtes) @@ -811,6 +820,13 @@ ms.date: 10/08/2020 - [ADMX_OfflineFiles/Pol_SyncOnCostedNetwork](./policy-csp-admx-offlinefiles.md#admx-offlinefiles-pol-synconcostednetwork) - [ADMX_OfflineFiles/Pol_WorkOfflineDisabled_1](./policy-csp-admx-offlinefiles.md#admx-offlinefiles-pol-workofflinedisabled-1) - [ADMX_OfflineFiles/Pol_WorkOfflineDisabled_2](./policy-csp-admx-offlinefiles.md#admx-offlinefiles-pol-workofflinedisabled-2) +- [ADMX_pca/DetectDeprecatedCOMComponentFailuresPolicy](./policy-csp-admx-pca.md#admx-pca-detectdeprecatedcomcomponentfailurespolicy) +- [ADMX_pca/DetectDeprecatedComponentFailuresPolicy](./policy-csp-admx-pca.md#admx-pca-detectdeprecatedcomponentfailurespolicy) +- [ADMX_pca/DetectInstallFailuresPolicy](./policy-csp-admx-pca.md#admx-pca-detectinstallfailurespolicy) +- [ADMX_pca/DetectUndetectedInstallersPolicy](./policy-csp-admx-pca.md#admx-pca-detectundetectedinstallerspolicy) +- [ADMX_pca/DetectUpdateFailuresPolicy](./policy-csp-admx-pca.md#admx-pca-detectupdatefailurespolicy) +- [ADMX_pca/DisablePcaUIPolicy](./policy-csp-admx-pca.md#admx-pca-disablepcauipolicy) +- [ADMX_pca/DetectBlockedDriversPolicy](./policy-csp-admx-pca.md#admx-pca-detectblockeddriverspolicy) - [ADMX_PeerToPeerCaching/EnableWindowsBranchCache](./policy-csp-admx-peertopeercaching.md#admx-peertopeercaching-enablewindowsbranchcache) - [ADMX_PeerToPeerCaching/EnableWindowsBranchCache_Distributed](./policy-csp-admx-peertopeercaching.md#admx-peertopeercaching-enablewindowsbranchcache-distributed) - [ADMX_PeerToPeerCaching/EnableWindowsBranchCache_Hosted](./policy-csp-admx-peertopeercaching.md#admx-peertopeercaching-enablewindowsbranchcache-hosted) @@ -820,6 +836,8 @@ ms.date: 10/08/2020 - [ADMX_PeerToPeerCaching/SetCachePercent](./policy-csp-admx-peertopeercaching.md#admx-peertopeercaching-setcachepercent) - [ADMX_PeerToPeerCaching/SetDataCacheEntryMaxAge](./policy-csp-admx-peertopeercaching.md#admx-peertopeercaching-setdatacacheentrymaxage) - [ADMX_PeerToPeerCaching/SetDowngrading](./policy-csp-admx-peertopeercaching.md#admx-peertopeercaching-setdowngrading) +- [ADMX_PenTraining/PenTrainingOff_1](./policy-csp-admx-pentraining.md#admx-pentraining-pentrainingoff_1) +- [ADMX_PenTraining/PenTrainingOff_2](./policy-csp-admx-pentraining.md#admx-pentraining-pentrainingoff_2) - [ADMX_PerformanceDiagnostics/WdiScenarioExecutionPolicy_1](./policy-csp-admx-performancediagnostics.md#admx-performancediagnostics-wdiscenarioexecutionpolicy-1) - [ADMX_PerformanceDiagnostics/WdiScenarioExecutionPolicy_2](./policy-csp-admx-performancediagnostics.md#admx-performancediagnostics-wdiscenarioexecutionpolicy-2) - [ADMX_PerformanceDiagnostics/WdiScenarioExecutionPolicy_3](./policy-csp-admx-performancediagnostics.md#admx-performancediagnostics-wdiscenarioexecutionpolicy-3) @@ -985,11 +1003,10 @@ ms.date: 10/08/2020 - [ADMX_SharedFolders/PublishDfsRoots](./policy-csp-admx-sharedfolders.md#admx-sharedfolders-publishdfsroots) - [ADMX_SharedFolders/PublishSharedFolders](./policy-csp-admx-sharedfolders.md#admx-sharedfolders-publishsharedfolders) - [ADMX_Sharing/NoInplaceSharing](./policy-csp-admx-sharing.md#admx-sharing-noinplacesharing) -- [ADMX_ShellCommandPromptRegEditTools/DisableCMD](./policy-csp-admx-shellcommandpromptregedittools.md#admx-shellcommandpromptregedittools-disablecmd) -- [ADMX_ShellCommandPromptRegEditTools/DisableRegedit](./policy-csp-admx-shellcommandpromptregedittools.md#admx-shellcommandpromptregedittools-disableregedit) - [ADMX_ShellCommandPromptRegEditTools/DisallowApps](./policy-csp-admx-shellcommandpromptregedittools.md#admx-shellcommandpromptregedittools-disallowapps) -- [ADMX_ShellCommandPromptRegEditTools/RestrictApps](./policy-csp-admx-shellcommandpromptregedittools.md#admx-shellcommandpromptregedittools-disablecmd) -- [ADMX_SkyDrive/PreventNetworkTrafficPreUserSignIn](./policy-csp-admx-skydrive.md#admx-skydrive-preventnetworktrafficpreusersignin) +- [ADMX_ShellCommandPromptRegEditTools/DisableRegedit](./policy-csp-admx-shellcommandpromptregedittools.md#admx-shellcommandpromptregedittools-disableregedit) +- [ADMX_ShellCommandPromptRegEditTools/DisableCMD](./policy-csp-admx-shellcommandpromptregedittools.md#admx-shellcommandpromptregedittools-disablecmd) +- [ADMX_ShellCommandPromptRegEditTools/RestrictApps](./policy-csp-admx-shellcommandpromptregedittools.md#admx-shellcommandpromptregedittools-restrictapps) - [ADMX_Smartcard/AllowCertificatesWithNoEKU](./policy-csp-admx-smartcard.md#admx-smartcard-allowcertificateswithnoeku) - [ADMX_Smartcard/AllowIntegratedUnblock](./policy-csp-admx-smartcard.md#admx-smartcard-allowintegratedunblock) - [ADMX_Smartcard/AllowSignatureOnlyKeys](./policy-csp-admx-smartcard.md#admx-smartcard-allowsignatureonlykeys) @@ -1278,9 +1295,6 @@ ms.date: 10/08/2020 - [ADMX_WDI/WdiDpsScenarioDataSizeLimitPolicy](./policy-csp-admx-wdi.md#admx-wdi-wdidpsscenariodatasizelimitpolicy) - [ADMX_WinCal/TurnOffWinCal_1](./policy-csp-admx-wincal.md#admx-wincal-turnoffwincal-1) - [ADMX_WinCal/TurnOffWinCal_2](./policy-csp-admx-wincal.md#admx-wincal-turnoffwincal-2) -- [ADMX_WindowsAnytimeUpgrade/Disabled](./policy-csp-admx-windowsanytimeupgrade.md#admx-windowsanytimeupgrade-disabled) -- [ADMX_WindowsColorSystem/ProhibitChangingInstalledProfileList_1](./policy-csp-admx-windowscolorsystem.md#admx-windowscolorsystem-prohibitchanginginstalledprofilelist_1] -- [ADMX_WindowsColorSystem/ProhibitChangingInstalledProfileList_2](./policy-csp-admx-windowscolorsystem.md#admx-windowscolorsystem-prohibitchanginginstalledprofilelist_2] - [ADMX_WindowsConnectNow/WCN_DisableWcnUi_1](./policy-csp-admx-windowsconnectnow.md#admx-windowsconnectnow-wcn-disablewcnui-1) - [ADMX_WindowsConnectNow/WCN_DisableWcnUi_2](./policy-csp-admx-windowsconnectnow.md#admx-windowsconnectnow-wcn-disablewcnui-2) - [ADMX_WindowsConnectNow/WCN_EnableRegistrar](./policy-csp-admx-windowsconnectnow.md#admx-windowsconnectnow-wcn-enableregistrar) @@ -1355,10 +1369,6 @@ ms.date: 10/08/2020 - [ADMX_WindowsExplorer/ShowSleepOption](./policy-csp-admx-windowsexplorer.md#admx-windowsexplorer-showsleepoption) - [ADMX_WindowsExplorer/TryHarderPinnedLibrary](./policy-csp-admx-windowsexplorer.md#admx-windowsexplorer-tryharderpinnedlibrary) - [ADMX_WindowsExplorer/TryHarderPinnedOpenSearch](./policy-csp-admx-windowsexplorer.md#admx-windowsexplorer-tryharderpinnedopensearch) -- [ADMX_WindowsFileProtection/WFPShowProgress](./policy-csp-admx-windowsfileprotection.md#admx-windowsfileprotection-wfpshowprogress) -- [ADMX_WindowsFileProtection/WFPQuota](./policy-csp-admx-windowsfileprotection.md#admx-windowsfileprotection-wfpquota) -- [ADMX_WindowsFileProtection/WFPScan](./policy-csp-admx-windowsfileprotection.md#admx-windowsfileprotection-wfpscan) -- [ADMX_WindowsFileProtection/WFPDllCacheDir](./policy-csp-admx-windowsfileprotection.md#admx-windowsfileprotection-wfpdllcachedir) - [ADMX_WindowsMediaDRM/DisableOnline](./policy-csp-admx-windowsmediadrm.md#admx-windowsmediadrm-disableonline) - [ADMX_WindowsMediaPlayer/ConfigureHTTPProxySettings](./policy-csp-admx-windowsmediaplayer.md#admx-windowsmediaplayer-configurehttpproxysettings) - [ADMX_WindowsMediaPlayer/ConfigureMMSProxySettings](./policy-csp-admx-windowsmediaplayer.md#admx-windowsmediaplayer-configuremmsproxysettings) @@ -1401,6 +1411,10 @@ ms.date: 10/08/2020 - [ADMX_wlansvc/SetCost](./policy-csp-admx-wlansvc.md#admx-wlansvc-setcost) - [ADMX_wlansvc/SetPINEnforced](./policy-csp-admx-wlansvc.md#admx-wlansvc-setpinenforced) - [ADMX_wlansvc/SetPINPreferred](./policy-csp-admx-wlansvc.md#admx-wlansvc-setpinpreferred) +- [ADMX_WordWheel/CustomSearch](./policy-csp-admx-wordwheel.md#admx-wordwheel-customsearch) +- [ADMX_WorkFoldersClient/Pol_UserEnableTokenBroker](./policy-csp-admx-workfoldersclient.md#admx-workfoldersclient-pol_userenabletokenbroker) +- [ADMX_WorkFoldersClient/Pol_UserEnableWorkFolders](./policy-csp-admx-workfoldersclient.md#admx-workfoldersclient-pol_userenableworkfolders) +- [ADMX_WorkFoldersClient/Pol_MachineEnableWorkFolders](./policy-csp-admx-workfoldersclient.md#admx-workfoldersclient-pol_machineenableworkfolders) - [ADMX_WPN/NoCallsDuringQuietHours](./policy-csp-admx-wpn.md#admx-wpn-nocallsduringquiethours) - [ADMX_WPN/NoLockScreenToastNotification](./policy-csp-admx-wpn.md#admx-wpn-nolockscreentoastnotification) - [ADMX_WPN/NoQuietHours](./policy-csp-admx-wpn.md#admx-wpn-noquiethours) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index b4bd9c3452..18c2823552 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -213,6 +213,23 @@ The following diagram shows the Policy configuration service provider in tree fo +### ADMX_AdmPwd policies + +
+
+ ADMX_AdmPwd/POL_AdmPwd_DontAllowPwdExpirationBehindPolicy +
+
+ ADMX_AdmPwd/POL_AdmPwd_Enabled +
+
+ ADMX_AdmPwd/POL_AdmPwd_AdminName +
+
+ ADMX_AdmPwd/POL_AdmPwd +
+
+ ### ADMX_AppCompat policies
@@ -2411,6 +2428,26 @@ dfsdiscoverdc">ADMX_DFS/DFSDiscoverDC
+### ADMX_MobilePCMobilityCenter policies +
+
+ ADMX_MobilePCMobilityCenter/MobilityCenterEnable_1 +
+
+ ADMX_MobilePCMobilityCenter/MobilityCenterEnable_2 +
+
+ +### ADMX_MobilePCPresentationSettings policies +
+
+ ADMX_MobilePCPresentationSettings/PresentationSettingsEnable_1 +
+
+ ADMX_MobilePCPresentationSettings/PresentationSettingsEnable_2 +
+
+ ### ADMX_MSAPolicy policies
@@ -2520,6 +2557,13 @@ dfsdiscoverdc">ADMX_DFS/DFSDiscoverDC
+### ADMX_MsiFileRecovery policies +
+
+ ADMX_MsiFileRecovery/WdiScenarioExecutionPolicy +
+
+ ### ADMX_nca policies
@@ -2911,6 +2955,32 @@ dfsdiscoverdc">ADMX_DFS/DFSDiscoverDC
+### ADMX_pca policies + +
+
+ ADMX_pca/DetectDeprecatedCOMComponentFailuresPolicy +
+
+ ADMX_pca/DetectDeprecatedComponentFailuresPolicy +
+
+ ADMX_pca/DetectInstallFailuresPolicy +
+
+ ADMX_pca/DetectUndetectedInstallersPolicy +
+
+ ADMX_pca/DetectUpdateFailuresPolicy +
+
+ ADMX_pca/DisablePcaUIPolicy +
+
+ ADMX_pca/DetectBlockedDriversPolicy +
+
+ ### ADMX_PeerToPeerCaching policies
@@ -2943,6 +3013,17 @@ dfsdiscoverdc">ADMX_DFS/DFSDiscoverDC
+### ADMX_PenTraining policies + +
+
+ ADMX_PenTraining/PenTrainingOff_1 +
+
+ ADMX_PenTraining/PenTrainingOff_2 +
+
+ ### ADMX_PerformanceDiagnostics policies
@@ -3541,30 +3622,22 @@ dfsdiscoverdc">ADMX_DFS/DFSDiscoverDC
-## ADMX_ShellCommandPromptRegEditTools policies +### ADMX_ShellCommandPromptRegEditTools policies
- ADMX_ShellCommandPromptRegEditTools/DisableCMD + ADMX_ShellCommandPromptRegEditTools/DisallowApps
ADMX_ShellCommandPromptRegEditTools/DisableRegedit
- ADMX_ShellCommandPromptRegEditTools/DisallowApps + ADMX_ShellCommandPromptRegEditTools/DisableCMD
- ADMX_ShellCommandPromptRegEditTools/RestrictApps + ADMX_ShellCommandPromptRegEditTools/RestrictApps
-
- -### ADMX_SkyDrive policies -
-
- ADMX_SkyDrive/PreventNetworkTrafficPreUserSignIn -
-
### ADMX_Smartcard policies @@ -4517,25 +4590,6 @@ dfsdiscoverdc">ADMX_DFS/DFSDiscoverDC
-### ADMX_WindowsAnytimeUpgrade policies - -
-
- ADMX_WindowsAnytimeUpgrade/Disabled -
-
- -### ADMX_WindowsColorSystem policies - -
-
- ADMX_WindowsColorSystem/ProhibitChangingInstalledProfileList_1 -
-
- ADMX_WindowsColorSystem/ProhibitChangingInstalledProfileList_2 -
-
- ### ADMX_WindowsConnectNow policies
@@ -4935,6 +4989,28 @@ dfsdiscoverdc">ADMX_DFS/DFSDiscoverDC
+### ADMX_WordWheel policies + +
+
+ ADMX_WordWheel/CustomSearch +
+
+ +### ADMX_WorkFoldersClient policies + +
+
+ ADMX_WorkFoldersClient/Pol_UserEnableTokenBroker +
+
+ ADMX_WorkFoldersClient/Pol_UserEnableWorkFolders +
+
+ ADMX_WorkFoldersClient/Pol_MachineEnableWorkFolders +
+
+ ### ADMX_WPN policies
@@ -8813,23 +8889,6 @@ dfsdiscoverdc">ADMX_DFS/DFSDiscoverDC
-### ADMX_WindowsFileProtection policies - -
-
- ADMX_WindowsFileProtection/WFPShowProgress -
-
- ADMX_WindowsFileProtection/WFPQuota -
-
- ADMX_WindowsFileProtection/WFPScan -
-
- ADMX_WindowsFileProtection/WFPDllCacheDir -
-
- ### WindowsInkWorkspace policies
diff --git a/windows/client-management/mdm/policy-csp-admx-admpwd.md b/windows/client-management/mdm/policy-csp-admx-admpwd.md new file mode 100644 index 0000000000..19b22053f4 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-admpwd.md @@ -0,0 +1,299 @@ +--- +title: Policy CSP - ADMX_AdmPwd +description: Policy CSP - ADMX_AdmPwd +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/09/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_AdmPwd + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +
+ + +## ADMX_AdmPwd policies + +
+
+ ADMX_AdmPwd/POL_AdmPwd_DontAllowPwdExpirationBehindPolicy +
+
+ ADMX_AdmPwd/POL_AdmPwd_Enabled +
+
+ ADMX_AdmPwd/POL_AdmPwd_AdminName +
+
+ ADMX_AdmPwd/POL_AdmPwd +
+
+ + +
+ + +**ADMX_AdmPwd/POL_AdmPwd_DontAllowPwdExpirationBehindPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProYesYes
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + + +When you enable this setting, planned password expiration longer than password age dictated by "Password Settings" policy is NOT allowed. When such expiration is detected, password is changed immediately and password expiration is set according to policy. + +When you disable or not configure this setting, password expiration time may be longer than required by "Password Settings" policy. + + + +ADMX Info: +- GP Friendly name: *Do not allow password expiration time longer than required by policy* +- GP name: *POL_AdmPwd_DontAllowPwdExpirationBehindPolicy* +- GP path: *Windows Components\AdmPwd* +- GP ADMX file name: *AdmPwd.admx* + + + +
+ + +**ADMX_AdmPwd/POL_AdmPwd_Enabled** + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProYesYes
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + + +This policy enables the management of password for local administrator account + +If you enable this setting, local administrator password is managed. + +If you disable or not configure this setting, local administrator password is NOT managed. + + + +ADMX Info: +- GP Friendly name: *Enable local admin password management* +- GP name: *POL_AdmPwd_Enabled* +- GP path: *Windows Components\AdmPwd* +- GP ADMX file name: *AdmPwd.admx* + + + + +
+ + +**ADMX_AdmPwd/POL_AdmPwd_AdminName** + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProYesYes
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + + +When you enable this setting, planned password expiration longer than password age dictated by "Password Settings" policy is NOT allowed. When such expiration is detected, password is changed immediately and password expiration is set according to policy. + +When you disable or not configure this setting, password expiration time may be longer than required by "Password Settings" policy. + + + + +ADMX Info: +- GP Friendly name: *Name of administrator account to manage* +- GP name: *POL_AdmPwd_AdminName* +- GP path: *Windows Components\AdmPwd* +- GP ADMX file name: *AdmPwd.admx* + + + + + +
+ + +**ADMX_AdmPwd/POL_AdmPwd** + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProYesYes
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + + +This policy setting enables management of password for local administrator account + +If you enable this setting, local administrator password is managed + +If you disable or not configure this setting, local administrator password is NOT managed. + + + + + +ADMX Info: +- GP Friendly name: *Password Settings* +- GP name: *POL_AdmPwd* +- GP path: *Windows Components\AdmPwd* +- GP ADMX file name: *AdmPwd.admx* + + + + + + + diff --git a/windows/client-management/mdm/policy-csp-admx-mobilepcmobilitycenter.md b/windows/client-management/mdm/policy-csp-admx-mobilepcmobilitycenter.md new file mode 100644 index 0000000000..ee4176f585 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-mobilepcmobilitycenter.md @@ -0,0 +1,184 @@ +--- +title: Policy CSP - ADMX_MobilePCMobilityCenter +description: Policy CSP - ADMX_MobilePCMobilityCenter +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nimishasatapathy +ms.date: 09/20/2021 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_MobilePCMobilityCenter + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + +
+ + +## ADMX_MobilePCMobilityCenter policies + +
+
+ ADMX_MobilePCMobilityCenter/MobilityCenterEnable_1 +
+
+ ADMX_MobilePCMobilityCenter/MobilityCenterEnable_2 +
+
+ + +
+ + +**ADMX_MobilePCMobilityCenter/MobilityCenterEnable_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +This policy setting turns off Windows Mobility Center. +- If you enable this policy setting, the user is unable to invoke Windows Mobility Center. The Windows Mobility Center UI is removed from all shell entry points and the .exe file does not launch it. + +- If you disable this policy setting, the user is able to invoke Windows Mobility Center and the .exe file launches it. + +If you do not configure this policy setting, Windows Mobility Center is on by default. + + + + + +ADMX Info: +- GP Friendly name: *Turn off Windows Mobility Center* +- GP name: *MobilityCenterEnable_1* +- GP path: *Windows Components\Windows Mobility Center* +- GP ADMX file name: *MobilePCMobilityCenter.admx* + + + +
+ + +**ADMX_MobilePCMobilityCenter/MobilityCenterEnable_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +This policy setting turns off Windows Mobility Center. +- If you enable this policy setting, the user is unable to invoke Windows Mobility Center. The Windows Mobility Center UI is removed from all shell entry points and the .exe file does not launch it. + +- If you disable this policy setting, the user is able to invoke Windows Mobility Center and the .exe file launches it. + +If you do not configure this policy setting, Windows Mobility Center is on by default. + + + + + +ADMX Info: +- GP Friendly name: *Turn off Windows Mobility Center* +- GP name: *MobilityCenterEnable_2* +- GP path: *Windows Components\Windows Mobility Center* +- GP ADMX file name: *MobilePCMobilityCenter.admx* + + +
+ + + diff --git a/windows/client-management/mdm/policy-csp-admx-mobilepcpresentationsettings.md b/windows/client-management/mdm/policy-csp-admx-mobilepcpresentationsettings.md new file mode 100644 index 0000000000..afa84fef27 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-mobilepcpresentationsettings.md @@ -0,0 +1,195 @@ +--- +title: Policy CSP - ADMX_MobilePCPresentationSettings +description: Policy CSP - ADMX_MobilePCPresentationSettings +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nimishasatapathy +ms.date: 09/20/2021 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_MobilePCPresentationSettings + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + +
+ + +## ADMX_MobilePCPresentationSettings policies + +
+
+ ADMX_MobilePCPresentationSettings/PresentationSettingsEnable_1 +
+
+ ADMX_MobilePCPresentationSettings/PresentationSettingsEnable_2 +
+
+ +
+ + + +**ADMX_MobilePCPresentationSettings/PresentationSettingsEnable_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +This policy setting turns off Windows presentation settings. + +- If you enable this policy setting, Windows presentation settings cannot be invoked. + +- If you disable this policy setting, Windows presentation settings can be invoked. + +The presentation settings icon will be displayed in the notification area. This will give users a quick and easy way to configure their system settings before a presentation to block system notifications and screen blanking, adjust speaker volume, and apply a custom background image. + +> [!NOTE] +> Users will be able to customize their system settings for presentations in Windows Mobility Center. +If you do not configure this policy setting, Windows presentation settings can be invoked. + + + + + + +ADMX Info: +- GP Friendly name: *Turn off Windows presentation settings* +- GP name: *PresentationSettingsEnable_1* +- GP path: *Windows Components\Presentation Settings* +- GP ADMX file name: *MobilePCPresentationSettings.admx* + + + +
+ + +**ADMX_MobilePCPresentationSettings/PresentationSettingsEnable_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +This policy setting turns off Windows presentation settings. + +- If you enable this policy setting, Windows presentation settings cannot be invoked. + +- If you disable this policy setting, Windows presentation settings can be invoked. + +The presentation settings icon will be displayed in the notification area. This will give users a quick and easy way to configure their system settings before a presentation to block system notifications and screen blanking, adjust speaker volume, and apply a custom background image. + +> [!NOTE] +> Users will be able to customize their system settings for presentations in Windows Mobility Center. +If you do not configure this policy setting, Windows presentation settings can be invoked. + + + + + +ADMX Info: +- GP Friendly name: *Turn off Windows presentation settings* +- GP name: *PresentationSettingsEnable_2* +- GP path: *Windows Components\Presentation Settings* +- GP ADMX file name: *MobilePCPresentationSettings.admx* + + +
+ + + diff --git a/windows/client-management/mdm/policy-csp-admx-msifilerecovery.md b/windows/client-management/mdm/policy-csp-admx-msifilerecovery.md new file mode 100644 index 0000000000..ca757d87c6 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-msifilerecovery.md @@ -0,0 +1,121 @@ +--- +title: Policy CSP - ADMX_MsiFileRecovery +description: Policy CSP - ADMX_MsiFileRecovery +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nimishasatapathy +ms.date: 09/20/2021 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_MsiFileRecovery + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + +
+ + +## ADMX_MsiFileRecovery policies + +
+
+ ADMX_MsiFileRecovery/WdiScenarioExecutionPolicy +
+
+ +
+ + +**ADMX_MsiFileRecovery/WdiScenarioExecutionPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +This policy setting allows you to configure the recovery behavior for corrupted MSI files to one of three states: + +- Prompt for Resolution: Detection, troubleshooting, and recovery of corrupted MSI applications will be turned on. Windows will prompt the user with a dialog-box when application reinstallation is required. +This is the default recovery behavior on Windows client. + +- Silent: Detection, troubleshooting, and notification of MSI application to reinstall will occur with no UI. Windows will log an event when corruption is determined and will suggest the application that should be re-installed. This behavior is recommended for headless operation and is the default recovery behavior on Windows server. + +- Troubleshooting Only: Detection and verification of file corruption will be performed without UI. +Recovery is not attempted. + +- If you enable this policy setting, the recovery behavior for corrupted files is set to either the Prompt For Resolution (default on Windows client), Silent (default on Windows server), or Troubleshooting Only. + +- If you disable this policy setting, the troubleshooting and recovery behavior for corrupted files will be disabled. No troubleshooting or resolution will be attempted. + +If you do not configure this policy setting, the recovery behavior for corrupted files will be set to the default recovery behavior. No system or service restarts are required for changes to this policy setting to take immediate effect after a Group Policy refresh. + +> [!NOTE] +> This policy setting will take effect only when the Diagnostic Policy Service (DPS) is in the running state. When the service is stopped or disabled, system file recovery will not be attempted. The DPS can be configured with the Services snap-in to the Microsoft Management Console. + + + + + +ADMX Info: +- GP Friendly name: *Configure MSI Corrupted File Recovery behavior* +- GP name: *WdiScenarioExecutionPolicy* +- GP path: *System\Troubleshooting and Diagnostics\MSI Corrupted File Recovery* +- GP ADMX file name: *MsiFileRecovery.admx* + + + + +
+ + \ No newline at end of file diff --git a/windows/client-management/mdm/policy-csp-admx-pca.md b/windows/client-management/mdm/policy-csp-admx-pca.md new file mode 100644 index 0000000000..1ec34c4edd --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-pca.md @@ -0,0 +1,539 @@ +--- +title: Policy CSP - ADMX_pca +description: Policy CSP - ADMX_pca +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nimishasatapathy +ms.date: 09/20/2021 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_pca + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + +
+ + +## ADMX_pca policies + +
+
+ ADMX_pca/DetectDeprecatedCOMComponentFailuresPolicy +
+
+ ADMX_pca/DetectDeprecatedComponentFailuresPolicy +
+
+ ADMX_pca/DetectInstallFailuresPolicy +
+
+ ADMX_pca/DetectUndetectedInstallersPolicy +
+
+ ADMX_pca/DetectUpdateFailuresPolicy +
+
+ ADMX_pca/DisablePcaUIPolicy +
+
+ ADMX_pca/DetectBlockedDriversPolicy +
+
+ + +
+ + +**ADMX_pca/DetectDeprecatedCOMComponentFailuresPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +This policy setting configures the Program Compatibility Assistant (PCA) to diagnose failures with application and driver compatibility. + +- If you enable this policy setting, the PCA is configured to detect failures during application installation, failures during application runtime, and drivers blocked due to compatibility issues. When failures are detected, the PCA will provide options to run the application in a compatibility mode or get help online through a Microsoft website. +- If you disable this policy setting, the PCA does not detect compatibility issues for applications and drivers. + +If you do not configure this policy setting, the PCA is configured to detect failures during application installation, failures during application runtime, and drivers blocked due to compatibility issues. + +> [!NOTE] +> This policy setting has no effect if the "Turn off Program Compatibility Assistant" policy setting is enabled. + +The Diagnostic Policy Service (DPS) and Program Compatibility Assistant Service must be running for the PCA to run. These services can be configured by using the Services snap-in to the Microsoft Management Console. + + + + + +ADMX Info: +- GP Friendly name: *Detect compatibility issues for applications and drivers* +- GP name: *DetectDeprecatedCOMComponentFailuresPolicy* +- GP path: *System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics* +- GP ADMX file name: *pca.admx* + + + +
+ +**ADMX_pca/DetectDeprecatedComponentFailuresPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +This setting exists only for backward compatibility, and is not valid for this version of Windows. + +To configure the Program Compatibility Assistant, use the 'Turn off Program Compatibility Assistant' setting under Computer Configuration\Administrative +Templates\Windows Components\Application Compatibility. + + + + + +ADMX Info: +- GP Friendly name: *Detect application install failures* +- GP name: *DetectDeprecatedComponentFailuresPolicy* +- GP path: *System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics* +- GP ADMX file name: *pca.admx* + + + + +
+ +**ADMX_pca/DetectInstallFailuresPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + + +This setting exists only for backward compatibility, and is not valid for this version of Windows. To configure the Program Compatibility Assistant, use the 'Turn off Program Compatibility Assistant' setting under Computer Configuration\Administrative Templates\Windows Components\Application Compatibility. + + + + +ADMX Info: +- GP Friendly name: *Detect applications unable to launch installers under UAC* +- GP name: *DetectInstallFailuresPolicy* +- GP path: *System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics* +- GP ADMX file name: *pca.admx* + + + +
+ +**ADMX_pca/DetectUndetectedInstallersPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + + +This setting exists only for backward compatibility, and is not valid for this version of Windows. To configure the Program Compatibility Assistant, use the 'Turn off Program Compatibility Assistant' setting under Computer Configuration\Administrative Templates\Windows Components\Application Compatibility. + + + + + +ADMX Info: +- GP Friendly name: *Detect application failures caused by deprecated Windows DLLs* +- GP name: *DetectUndetectedInstallersPolicy* +- GP path: *System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics* +- GP ADMX file name: *pca.admx* + + + +
+ +**ADMX_pca/DetectUpdateFailuresPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + + +This setting exists only for backward compatibility, and is not valid for this version of Windows. +To configure the Program Compatibility Assistant, use the 'Turn off Program Compatibility Assistant' setting under Computer Configuration\Administrative Templates\Windows Components\Application Compatibility. + + + + + +ADMX Info: +- GP Friendly name: *Detect application failures caused by deprecated COM objects* +- GP name: *DetectUpdateFailuresPolicy* +- GP path: *System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics* +- GP ADMX file name: *pca.admx* + + + +
+ +**ADMX_pca/DisablePcaUIPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + + +This setting exists only for backward compatibility, and is not valid for this version of Windows. +To configure the Program Compatibility Assistant, use the 'Turn off Program Compatibility Assistant' setting under Computer Configuration\Administrative Templates\Windows Components\Application Compatibility. + + + + + +ADMX Info: +- GP Friendly name: *Detect application installers that need to be run as administrator* +- GP name: *DisablePcaUIPolicy* +- GP path: *System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics* +- GP ADMX file name: *pca.admx* + + + +
+ +**ADMX_pca/DetectBlockedDriversPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + + +This setting exists only for backward compatibility, and is not valid for this version of Windows. +To configure the Program Compatibility Assistant, use the 'Turn off Program Compatibility Assistant' setting under Computer Configuration\Administrative Templates\Windows Components\Application Compatibility. + + + + + +ADMX Info: +- GP Friendly name: *Notify blocked drivers* +- GP name: *DetectBlockedDriversPolicy* +- GP path: *System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics* +- GP ADMX file name: *pca.admx* + + + + + + + diff --git a/windows/client-management/mdm/policy-csp-admx-pentraining.md b/windows/client-management/mdm/policy-csp-admx-pentraining.md new file mode 100644 index 0000000000..83f6c2e71a --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-pentraining.md @@ -0,0 +1,181 @@ +--- +title: Policy CSP - ADMX_PenTraining +description: Policy CSP - ADMX_PenTraining +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/22/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_PenTraining + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + +
+ + +## ADMX_PenTraining policies + +
+
+ ADMX_PenTraining/PenTrainingOff_1 +
+
+ ADMX_PenTraining/PenTrainingOff_2 +
+
+ +
+ + +**ADMX_PenTraining/PenTrainingOff_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Turns off Tablet PC Pen Training. + +- If you enable this policy setting, users cannot open Tablet PC Pen Training. + +- If you disable or do not configure this policy setting, users can open Tablet PC Pen Training. + + + + + +ADMX Info: +- GP Friendly name: *Turn off Tablet PC Pen Training* +- GP name: *PenTrainingOff_1* +- GP path: *Windows Components\Tablet PC\Tablet PC Pen Training* +- GP ADMX file name: *PenTraining.admx* + + + +
+ + +**ADMX_PenTraining/PenTrainingOff_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +Turns off Tablet PC Pen Training. + +- If you enable this policy setting, users cannot open Tablet PC Pen Training. + +- If you disable or do not configure this policy setting, users can open Tablet PC Pen Training. + + + + + +ADMX Info: +- GP Friendly name: *Turn off Tablet PC Pen Training* +- GP name: *PenTrainingOff_2* +- GP path: *Windows Components\Tablet PC\Tablet PC Pen Training* +- GP ADMX file name: *PenTraining.admx* + + + +
+ + + diff --git a/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools.md b/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools.md index fe1e555961..1214046238 100644 --- a/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools.md +++ b/windows/client-management/mdm/policy-csp-admx-shellcommandpromptregedittools.md @@ -7,33 +7,34 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: manikadhiman -ms.date: 09/21/2020 +ms.date: 09/18/2020 ms.reviewer: manager: dansimp --- # Policy CSP - ADMX_ShellCommandPromptRegEditTools -> [!TIP] -> These are ADMX-backed policies and require a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
## ADMX_ShellCommandPromptRegEditTools policies +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). +
- ADMX_ShellCommandPromptRegEditTools/DisableCMD + ADMX_ShellCommandPromptRegEditTools/DisallowApps
ADMX_ShellCommandPromptRegEditTools/DisableRegedit
- ADMX_ShellCommandPromptRegEditTools/DisallowApps + ADMX_ShellCommandPromptRegEditTools/DisableCMD
ADMX_ShellCommandPromptRegEditTools/RestrictApps @@ -41,152 +42,6 @@ manager: dansimp
-
- - -**ADMX_ShellCommandPromptRegEditTools/DisableCMD** - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * User - -
- - - -This policy setting prevents users from running the interactive command prompt, Cmd.exe. This policy setting also determines whether batch files (.cmd and .bat) can run on the computer. - -If you enable this policy setting and the user tries to open a command window, the system displays a message explaining that a setting prevents the action. - -If you disable this policy setting or do not configure it, users can run Cmd.exe and batch files normally. - -> [!NOTE] -> Do not prevent the computer from running batch files if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Remote Desktop Services. - - - - - -ADMX Info: -- GP Friendly name: *Prevent access to the command prompt* -- GP name: *DisableCMD* -- GP path: *System* -- GP ADMX file name: *Shell-CommandPrompt-RegEditTools.admx* - - - -
- - -**ADMX_ShellCommandPromptRegEditTools/DisableRegedit** - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * User - -
- - - -Disables the Windows registry editor Regedit.exe. - -If you enable this policy setting and the user tries to start Regedit.exe, a message appears explaining that a policy setting prevents the action. - -If you disable this policy setting or do not configure it, users can run Regedit.exe normally. - -To prevent users from using other administrative tools, use the "Run only specified Windows applications" policy setting. - - - - - -ADMX Info: -- GP Friendly name: *Prevent access to registry editing tools* -- GP name: *DisableRegedit* -- GP path: *System* -- GP ADMX file name: *Shell-CommandPrompt-RegEditTools.admx* - - - -
@@ -197,7 +52,7 @@ ADMX Info: Edition Windows 10 - Windows 11 + Windows 11 Home @@ -239,27 +94,176 @@ ADMX Info: -This policy setting prevents Windows from running the programs you specify in this policy setting. +This policy setting prevents users from running the interactive command prompt, Cmd.exe. + +This policy setting also determines whether batch files (.cmd and .bat) can run on the computer. -If you enable this policy setting, users cannot run programs that you add to the list of disallowed applications. - -If you disable this policy setting or do not configure it, users can run any programs. - -This policy setting only prevents users from running programs that are started by the File Explorer process. It does not prevent users from running programs, such as Task Manager, which are started by the system process or by other processes. Also, if users have access to the command prompt (Cmd.exe), this policy setting does not prevent them from starting programs in the command window even though they would be prevented from doing so using File Explorer. +- If you enable this policy setting and the user tries to open a command window, the system displays a message explaining that a setting prevents the action. . +- If you disable this policy setting or do not configure it, users can run Cmd.exe and batch files normally. + > [!NOTE] -> Non-Microsoft applications with Windows 2000 or later certification are required to comply with this policy setting. -> To create a list of allowed applications, click Show. In the Show Contents dialog box, in the Value column, type the application executable name (for example, Winword.exe, Poledit.exe, Powerpnt.exe). +> Do not prevent the computer from running batch files if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Remote Desktop Services. + ADMX Info: -- GP Friendly name: *Don't run specified Windows applications* +- GP Friendly name: *Prevent access to the command prompt* - GP name: *DisallowApps* - GP path: *System* -- GP ADMX file name: *Shell-CommandPrompt-RegEditTools.admx* +- GP ADMX file name: *ShellCommandPromptRegEditTools.admx* + + + +
+ + + +**ADMX_ShellCommandPromptRegEditTools/DisableRegedit** + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +This policy setting disables the Windows registry editor Regedit.exe. + +- If you enable this policy setting and the user tries to start Regedit.exe, a message appears explaining that a policy setting prevents the action. + +- If you disable this policy setting or do not configure it, users can run Regedit.exe normally. + +To prevent users from using other administrative tools, use the "Run only specified Windows applications" policy setting. + + + + + +ADMX Info: +- GP Friendly name: *Prevent access to registry editing tools* +- GP name: *DisableRegedit* +- GP path: *System\Server Manager* +- GP ADMX file name: *ShellCommandPromptRegEditTools.admx* + + + +
+ + +**ADMX_ShellCommandPromptRegEditTools/DisableCMD** + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +This policy setting limits the Windows programs that users have permission to run on the computer. + +- If you enable this policy setting, users can only run programs that you add to the list of allowed applications. + +- If you disable this policy setting or do not configure it, users can run all applications. This policy setting only prevents users from running programs that are started by the File Explorer process. + +It does not prevent users from running programs such as Task Manager, which are started by the system process or by other processes. Also, if users have access to the command prompt (Cmd.exe), this policy setting does not prevent them from starting programs in the command window even though they would be prevented from doing so using File Explorer. + +Non-Microsoft applications with Windows 2000 or later certification are required to comply with this policy setting. + +To create a list of allowed applications, click Show. In the Show Contents dialog box, in the Value column, type the application executable name (e.g., Winword.exe, Poledit.exe, Powerpnt.exe). + + + + + +ADMX Info: +- GP Friendly name: *Run only specified Windows applications* +- GP name: *DisableCMD* +- GP path: *System* +- GP ADMX file name: *ShellCommandPromptRegEditTools.admx* @@ -273,7 +277,7 @@ ADMX Info: Edition Windows 10 - Windows 11 + Windows 11 Home @@ -315,33 +319,31 @@ ADMX Info: -Limits the Windows programs that users have permission to run on the computer. +This policy setting prevents Windows from running the programs you specify in this policy setting. -If you enable this policy setting, users can only run programs that you add to the list of allowed applications. +- If you enable this policy setting, users cannot run programs that you add to the list of disallowed applications. -If you disable this policy setting or do not configure it, users can run all applications. +- If you disable this policy setting or do not configure it, users can run any programs. -This policy setting only prevents users from running programs that are started by the File Explorer process. It does not prevent users from running programs such as Task Manager, which are started by the system process or by other processes. Also, if users have access to the command prompt (Cmd.exe), this policy setting does not prevent them from starting programs in the command window even though they would be prevented from doing so using File Explorer. +This policy setting only prevents users from running programs that are started by the File Explorer process. It does not prevent users from running programs, such as Task Manager, which are started by the system process or by other processes. Also, if users have access to the command prompt (Cmd.exe), this policy setting does not prevent them from starting programs in the command window even though they would be prevented from doing so using File Explorer. + +Non-Microsoft applications with Windows 2000 or later certification are required to comply with this policy setting. + +To create a list of allowed applications, click Show. In the Show Contents dialog box, in the Value column, type the application executable name (e.g., Winword.exe, Poledit.exe, Powerpnt.exe). -> [!NOTE] -> Non-Microsoft applications with Windows 2000 or later certification are required to comply with this policy setting. -> To create a list of allowed applications, click Show. In the Show Contents dialog box, in the Value column, type the application executable name (for example, Winword.exe, Poledit.exe, Powerpnt.exe). ADMX Info: -- GP Friendly name: *Run only specified Windows applications* +- GP Friendly name: *Don't run specified Windows applications* - GP name: *RestrictApps* - GP path: *System* -- GP ADMX file name: *Shell-CommandPrompt-RegEditTools.admx* +- GP ADMX file name: *ShellCommandPromptRegEditTools.admx* -
- - diff --git a/windows/client-management/mdm/policy-csp-admx-skydrive.md b/windows/client-management/mdm/policy-csp-admx-skydrive.md deleted file mode 100644 index 90f1b868a1..0000000000 --- a/windows/client-management/mdm/policy-csp-admx-skydrive.md +++ /dev/null @@ -1,113 +0,0 @@ ---- -title: Policy CSP - ADMX_SkyDrive -description: Policy CSP - ADMX_SkyDrive -ms.author: dansimp -ms.localizationpriority: medium -ms.topic: article -ms.prod: w10 -ms.technology: windows -author: manikadhiman -ms.date: 12/08/2020 -ms.reviewer: -manager: dansimp ---- - -# Policy CSP - ADMX_SkyDrive - - -
- - -## ADMX_SkyDrive policies - -
-
- ADMX_SkyDrive/PreventNetworkTrafficPreUserSignIn -
-
- - -
- - -**ADMX_SkyDrive/PreventNetworkTrafficPreUserSignIn** - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Enable this setting to prevent the OneDrive sync client (OneDrive.exe) from generating network traffic (checking for updates, etc.) until the user signs in to OneDrive or starts syncing files to the local computer. - -If you enable this setting, users must sign in to the OneDrive sync client on the local computer, or select to sync OneDrive or SharePoint files on the computer, for the sync client to start automatically. - -If this setting is not enabled, the OneDrive sync client will start automatically when users sign in to Windows. - -If you enable or disable this setting, do not return the setting to Not Configured. Doing so will not change the configuration and the last configured setting will remain in effect. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP Friendly name: *Prevent OneDrive from generating network traffic until the user signs in to OneDrive* -- GP name: *PreventNetworkTrafficPreUserSignIn* -- GP path: *Windows Components\OneDrive* -- GP ADMX file name: *SkyDrive.admx* - - - -
- -> [!NOTE] -> These policies are currently only available as part of a Windows Insider release. - - - diff --git a/windows/client-management/mdm/policy-csp-admx-windowsfileprotection.md b/windows/client-management/mdm/policy-csp-admx-windowsfileprotection.md deleted file mode 100644 index 8cb83a2ca9..0000000000 --- a/windows/client-management/mdm/policy-csp-admx-windowsfileprotection.md +++ /dev/null @@ -1,352 +0,0 @@ ---- -title: Policy CSP - ADMX_WindowsFileProtection -description: Policy CSP - ADMX_WindowsFileProtection -ms.author: dansimp -ms.localizationpriority: medium -ms.topic: article -ms.prod: w10 -ms.technology: windows -author: manikadhiman -ms.date: 01/03/2021 -ms.reviewer: -manager: dansimp ---- - -# Policy CSP - ADMX_WindowsFileProtection ->[!TIP] -> These are ADMX-backed policies and require a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -
- - -## ADMX_WindowsFileProtection policies - -
-
- ADMX_WindowsFileProtection/WFPShowProgress -
-
- ADMX_WindowsFileProtection/WFPQuota -
-
- ADMX_WindowsFileProtection/WFPScan -
-
- ADMX_WindowsFileProtection/WFPDllCacheDir -
-
- - -
- - -**ADMX_WindowsFileProtection/WFPShowProgress** - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Machine - -
- - - -This policy setting hides the file scan progress window. This window provides status information to sophisticated users, but it might confuse the users. - -- If you enable this policy setting, the file scan window does not appear during file scanning. -- If you disable or do not configure this policy setting, the file scan progress window appears. - - - - - - -ADMX Info: -- GP Friendly name: *Hide the file scan progress window* -- GP name: *WFPShowProgress* -- GP path: *Windows File Protection!SfcShowProgress* -- GP ADMX file name: *WindowsFileProtection.admx* - - - -
- - -**ADMX_WindowsFileProtection/WFPQuota** - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Machine - -
- - - -This policy setting specifies the maximum amount of disk space that can be used for the Windows File Protection file cache. -Windows File Protection adds protected files to the cache until the cache content reaches the quota. -If the quota is greater than 50 MB, Windows File Protection adds other important Windows XP files to the cache until the cache size reaches the quota. - -- If you enable this policy setting, enter the maximum amount of disk space to be used (in MB). -To indicate that the cache size is unlimited, select "4294967295" as the maximum amount of disk space. - -- If you disable this policy setting or do not configure it, the default value is set to 50 MB. -> [!NOTE] -> Icon size is dependent upon what the user has set it to in the previous session. - - - - - -ADMX Info: -- GP Friendly name: *Limit Windows File Protection cache size* -- GP name: *WFPQuota* -- GP path: *System\Windows File Protection* -- GP ADMX file name: *WindowsFileProtection.admx* - - - -
- - -**ADMX_WindowsFileProtection/WFPScan** - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Machine - -
- - - -This policy setting allows you to set when Windows File Protection scans protected files. -This policy setting directs Windows File Protection to enumerate and scan all system files for changes. - -- If you enable this policy setting, select a rate from the "Scanning Frequency" box. -You can use this setting to direct Windows File Protection to scan files more often. --- "Do not scan during startup," the default, scans files only during setup. --- "Scan during startup" also scans files each time you start Windows XP. -This setting delays each startup. - -- If you disable or do not configure this policy setting, by default, files are scanned only during setup. - -> [!NOTE] -> This policy setting affects file scanning only. It does not affect the standard background file change detection that Windows File Protection provides. - - - - - - -ADMX Info: -- GP Friendly name: *Set Windows File Protection scanning* -- GP name: *WFPScan* -- GP path: *System\Windows File Protection* -- GP ADMX file name: *WindowsFileProtection.admx* - - - -
- - -**ADMX_WindowsFileProtection/WFPDllCacheDir** - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
- - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Machine - -
- - - -This policy setting specifies an alternate location for the Windows File Protection cache. - -- If you enable this policy setting, enter the fully qualified local path to the new location in the "Cache file path" box. -- If you disable this setting or do not configure it, the Windows File Protection cache is located in the "%Systemroot%\System32\Dllcache directory". - -> [!NOTE] -> Do not add the cache on a network shared directory. - - -If both the "Hide specified Control Panel items" setting and the "Show only specified Control Panel items" setting are enabled, the "Show only specified Control Panel items" setting is ignored. - -> [!NOTE] -> The Display Control Panel item cannot be hidden in the Desktop context menu by using this setting. To hide the Display Control Panel item and prevent users from modifying the computer's display settings use the "Disable Display Control Panel" setting instead. -> -> To hide pages in the System Settings app, use the "Settings Page Visibility" setting under Computer Configuration. - - - - - -ADMX Info: -- GP Friendly name: *Specify Windows File Protection cache location* -- GP name: *WFPDllCacheDir* -- GP path: *System\Windows File Protection* -- GP ADMX file name: *WindowsFileProtection.admx* - - - -
- - - \ No newline at end of file diff --git a/windows/client-management/mdm/policy-csp-admx-windowsanytimeupgrade.md b/windows/client-management/mdm/policy-csp-admx-wordwheel.md similarity index 62% rename from windows/client-management/mdm/policy-csp-admx-windowsanytimeupgrade.md rename to windows/client-management/mdm/policy-csp-admx-wordwheel.md index d5cb074150..d66b03aaee 100644 --- a/windows/client-management/mdm/policy-csp-admx-windowsanytimeupgrade.md +++ b/windows/client-management/mdm/policy-csp-admx-wordwheel.md @@ -1,20 +1,21 @@ --- -title: Policy CSP - ADMX_WindowsAnytimeUpgrade -description: Policy CSP - ADMX_WindowsAnytimeUpgrade +title: Policy CSP - ADMX_WordWheel +description: Policy CSP - ADMX_WordWheel ms.author: dansimp ms.localizationpriority: medium ms.topic: article ms.prod: w10 ms.technology: windows -author: manikadhiman -ms.date: 09/29/2020 +author: nimishasatapathy +ms.date: 09/22/2021 ms.reviewer: manager: dansimp --- -# Policy CSP - ADMX_WindowsAnytimeUpgrade +# Policy CSP - ADMX_WordWheel + > [!TIP] -> These are ADMX-backed policies and require a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). > > You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). > @@ -23,11 +24,11 @@ manager: dansimp
-## ADMX_WindowsAnytimeUpgrade policies +## ADMX_WordWheel policies
- ADMX_WindowsAnytimeUpgrade/Disabled + ADMX_WordWheel/CustomSearch
@@ -35,14 +36,14 @@ manager: dansimp
-**ADMX_WindowsAnytimeUpgrade/Disabled** +**ADMX_WordWheel/CustomSearch** - + @@ -78,28 +79,26 @@ manager: dansimp [Scope](./policy-configuration-service-provider.md#policy-scope): > [!div class = "checklist"] -> * Device > * User
-By default, Add features to Windows 10 is available for all administrators. +Set up the menu name and URL for the custom Internet search provider. -If you enable this policy setting, the wizard will not run. - -If you disable this policy setting or set it to Not Configured, the wizard will run. +- If you enable this setting, the specified menu name and URL will be used for Internet searches. +- If you disable or not configure this setting, the default Internet search provider will be used. ADMX Info: -- GP Friendly name: *Prevent the wizard from running.* -- GP name: *Disabled* -- GP path: *Windows Components\Add features to Windows 10* -- GP ADMX file name: *WindowsAnytimeUpgrade.admx* +- GP Friendly name: *Custom Instant Search Internet search provider* +- GP name: *CustomSearch* +- GP path: *Windows Components\Instant Search* +- GP ADMX file name: *WordWheel.admx* diff --git a/windows/client-management/mdm/policy-csp-admx-workfoldersclient.md b/windows/client-management/mdm/policy-csp-admx-workfoldersclient.md new file mode 100644 index 0000000000..35838e210e --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-workfoldersclient.md @@ -0,0 +1,264 @@ +--- +title: Policy CSP - ADMX_WorkFoldersClient +description: Policy CSP - ADMX_WorkFoldersClient +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nimishasatapathy +ms.date: 09/22/2021 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_WorkFoldersClient + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + +
+ + +## ADMX_WorkFoldersClient policies + +
+
+ ADMX_WorkFoldersClient/Pol_UserEnableTokenBroker +
+
+ ADMX_WorkFoldersClient/Pol_UserEnableWorkFolders +
+
+ ADMX_WorkFoldersClient/Pol_MachineEnableWorkFolders +
+
+ + +
+ + +**ADMX_WorkFoldersClient/Pol_UserEnableTokenBroker** + + +
Edition Windows 10Windows 11Windows 11
Home
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +This policy setting specifies whether Work Folders should be set up automatically for all users of the affected computer. + +- If you enable this policy setting, Work Folders will be set up automatically for all users of the affected computer. + +This prevents users from choosing not to use Work Folders on the computer; it also prevents them from manually specifying the local folder in which Work Folders stores files. Work Folders will use the settings specified in the "Specify Work Folders settings" policy setting in User Configuration\Administrative Templates\Windows Components\WorkFolders. If the "Specify Work Folders settings" policy setting does not apply to a user, Work Folders is not automatically set up. +- If you disable or do not configure this policy setting, Work Folders uses the "Force automatic setup" option of the "Specify Work Folders settings" policy setting to determine whether to automatically set up Work Folders for a given user. + + + + + +ADMX Info: +- GP Friendly name: *Force automatic setup for all users* +- GP name: *Pol_UserEnableTokenBroker* +- GP path: *Windows Components\Work Folders* +- GP ADMX file name: *WorkFoldersClient.admx* + + + + +
+ + +**ADMX_WorkFoldersClient/Pol_UserEnableWorkFolders** + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +This policy setting specifies the Work Folders server for affected users, as well as whether or not users are allowed to change settings when setting up Work Folders on a domain-joined computer. + +- If you enable this policy setting, affected users receive Work Folders settings when they sign in to a domain-joined PC. + +If this policy setting is disabled or not configured, no Work Folders settings are specified for the affected users, though users can manually set up Work Folders by using the Work Folders Control Panel item. The "Work Folders URL" can specify either the URL used by the organization for Work Folders discovery, or the specific URL of the file server that stores the affected users' data. The "Work Folders Local Path" specifies the local folder used on the client machine to sync files. This path may contain environment variables. + +> [!NOTE] +> In order for this configuration to take effect, a valid 'Work Folders URL' must also be specified. + +The “On-demand file access preference” option controls whether to enable on-demand file access. When enabled, the user controls which files in Work Folders are available offline on a given PC. The rest of the files in Work Folders are always visible and don’t take up any space on the PC, but the user must be connected to the Internet to access them. If you enable this policy setting, on-demand file access is enabled. + +- If you disable this policy setting, on-demand file access is disabled, and enough storage space to store all the user’s files is required on each of their PCs. + +If you specify User choice or do not configure this policy setting, the user decides whether to enable on-demand file access. However, if the Force automatic setup policy setting is enabled, Work Folders is set up automatically with on-demand file access enabled. + +The "Force automatic setup" option specifies that Work Folders should be set up automatically without prompting users. This prevents users from choosing not to use Work Folders on the computer; it also prevents them from manually specifying the local folder in which Work Folders stores files. By default, Work Folders is stored in the "%USERPROFILE%\Work Folders" folder. If this option is not specified, users must use the Work Folders Control Panel item on their computers to set up Work Folders. + + + + + +ADMX Info: +- GP Friendly name: *Specify Work Folders settings* +- GP name: *Pol_UserEnableWorkFolders* +- GP path: *Windows Components\Work Folders* +- GP ADMX file name: *WorkFoldersClient.admx* + + + +
+ + +**ADMX_WorkFoldersClient/Pol_MachineEnableWorkFolders** + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
EditionWindows 10Windows 11
HomeNoNo
ProNoNo
BusinessNoNo
EnterpriseYesYes
EducationYesYes
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
+ + + +This policy specifies whether Work Folders should use Token Broker for interactive AD FS authentication instead of its own OAuth2 token flow used in previous versions. + + + + + +ADMX Info: +- GP Friendly name: *Enables the use of Token Broker for AD FS authentication* +- GP name: *Pol_MachineEnableWorkFolders* +- GP path: *Windows Components\Work Folders* +- GP ADMX file name: *WorkFoldersClient.admx* + + + + + + \ No newline at end of file diff --git a/windows/client-management/mdm/toc.yml b/windows/client-management/mdm/toc.yml index 554f8d934a..9472789042 100644 --- a/windows/client-management/mdm/toc.yml +++ b/windows/client-management/mdm/toc.yml @@ -407,6 +407,8 @@ items: href: policy-csp-admx-activexinstallservice.md - name: ADMX_AddRemovePrograms href: policy-csp-admx-addremoveprograms.md + - name: ADMX_AdmPwd + href: policy-csp-admx-admpwd.md - name: ADMX_AppCompat href: policy-csp-admx-appcompat.md - name: ADMX_AppxPackageManager @@ -455,10 +457,8 @@ items: href: policy-csp-admx-dfs.md - name: ADMX_DigitalLocker href: policy-csp-admx-digitallocker.md - - name: ADMX_DiskNVCache - href: policy-csp-admx-disknvcache.md - - name: ADMX_DiskQuota - href: policy-csp-admx-diskquota.md + - name: ADMX_DiskDiagnostic + href: policy-csp-admx-diskdiagnostic.md - name: ADMX_DistributedLinkTracking href: policy-csp-admx-distributedlinktracking.md - name: ADMX_DnsClient @@ -507,6 +507,8 @@ items: href: policy-csp-admx-help.md - name: ADMX_HelpAndSupport href: policy-csp-admx-helpandsupport.md + - name: ADMX_HotSpotAuth + href: policy-csp-admx-hotspotauth.md - name: ADMX_ICM href: policy-csp-admx-icm.md - name: ADMX_IIS @@ -535,6 +537,10 @@ items: href: policy-csp-admx-mmc.md - name: ADMX_MMCSnapins href: policy-csp-admx-mmcsnapins.md + - name: ADMX_MobilePCMobilityCenter + href: policy-csp-admx-mobilepcmobilitycenter.md + - name: ADMX_MobilePCPresentationSettings + href: policy-csp-admx-mobilepcpresentationsettings.md - name: ADMX_MSAPolicy href: policy-csp-admx-msapolicy.md - name: ADMX_msched @@ -543,6 +549,8 @@ items: href: policy-csp-admx-msdt.md - name: ADMX_MSI href: policy-csp-admx-msi.md + - name: ADMX_MsiFileRecovery + href: policy-csp-admx-msifilerecovery.md - name: ADMX_nca href: policy-csp-admx-nca.md - name: ADMX_NCSI @@ -553,8 +561,12 @@ items: href: policy-csp-admx-networkconnections.md - name: ADMX_OfflineFiles href: policy-csp-admx-offlinefiles.md + - name: ADMX_pca + href: policy-csp-admx-pca.md - name: ADMX_PeerToPeerCaching href: policy-csp-admx-peertopeercaching.md + - name: ADMX_PenTraining + href: policy-csp-admx-pentraining.md - name: ADMX_PerformanceDiagnostics href: policy-csp-admx-performancediagnostics.md - name: ADMX_Power @@ -598,9 +610,7 @@ items: - name: ADMX_Sharing href: policy-csp-admx-sharing.md - name: ADMX_ShellCommandPromptRegEditTools - href: policy-csp-admx-shellcommandpromptregedittools.md - - name: ADMX_SkyDrive - href: policy-csp-admx-skydrive.md + href: policy-csp-admx-shellcommandpromptregedittools.md - name: ADMX_Smartcard href: policy-csp-admx-smartcard.md - name: ADMX_Snmp @@ -635,16 +645,10 @@ items: href: policy-csp-admx-wdi.md - name: ADMX_WinCal href: policy-csp-admx-wincal.md - - name: ADMX_WindowsAnytimeUpgrade - href: policy-csp-admx-windowsanytimeupgrade.md - - name: ADMX_WindowsColorSystem - href: policy-csp-admx-windowscolorsystem.md - name: ADMX_WindowsConnectNow href: policy-csp-admx-windowsconnectnow.md - name: ADMX_WindowsExplorer href: policy-csp-admx-windowsexplorer.md - - name: ADMX_WindowsFileProtection - href: policy-csp-admx-windowsfileprotection.md - name: ADMX_WindowsMediaDRM href: policy-csp-admx-windowsmediadrm.md - name: ADMX_WindowsMediaPlayer @@ -661,6 +665,10 @@ items: href: policy-csp-admx-winsrv.md - name: ADMX_wlansvc href: policy-csp-admx-wlansvc.md + - name: ADMX_WordWheel + href: policy-csp-admx-wordwheel.md + - name: ADMX_WorkFoldersClient + href: policy-csp-admx-workfoldersclient.md - name: ADMX_WPN href: policy-csp-admx-wpn.md - name: ApplicationDefaults diff --git a/windows/hub/index.yml b/windows/hub/index.yml index 5a0881cad0..9c115c5b15 100644 --- a/windows/hub/index.yml +++ b/windows/hub/index.yml @@ -32,10 +32,9 @@ highlightedContent: itemType: overview url: /windows/release-health/ # Card - - title: Learn more about Hybrid Work + - title: Empower your hybrid workforce itemType: overview - url: https://www.microsoft.com/hybridwork/ - + url: https://www.microsoft.com/microsoft-365/blog/2021/10/04/empower-your-hybrid-workforce-today-with-windows-11/ # productDirectory section (optional) productDirectory: @@ -51,6 +50,18 @@ productDirectory: imageSrc: /windows/resources/images/winlogo.svg summary: See the system requirements for Windows 11, including running Windows 11 on a virtual machine url: /windows/whats-new/windows-11-requirements + - title: Learn more about Windows 11 Enterprise + imageSrc: /windows/resources/images/winlogo.svg + summary: Get more information on the features, security, and licensing plans designed for organizations + url: https://www.microsoft.com/microsoft-365/windows/windows-11-enterprise + - title: FAQ - Upgrade to Windows 11 + imageSrc: /windows/resources/images/winlogo.svg + summary: See some common questions and answers when upgrading to Windows 11 + url: https://support.microsoft.com/windows/upgrade-to-windows-11-faq-fb6206a2-1a0f-448a-80f1-8668ee5b2bf9 + - title: Windows 11 chip to cloud protection - Security challenges of hybrid work + imageSrc: /windows/resources/images/winlogo.svg + summary: Blog from the Microsoft Windows Security Team + url: https://www.microsoft.com/security/blog/2021/10/04/windows-11-offers-chip-to-cloud-protection-to-meet-the-new-security-challenges-of-hybrid-work - title: Trusted Platform Module (TPM) imageSrc: /windows/resources/images/winlogo.svg summary: Learn more about TPM, and why it's a good thing @@ -136,6 +147,9 @@ conceptualContent: - url: /windows/application-management/remove-provisioned-apps-during-update itemType: how-to-guide text: Keep removed apps from returning during an update + - url: https://blogs.windows.com/windowsdeveloper/2021/10/04/developing-for-windows-11/ + itemType: overview + text: Blog - Develop apps for Windows 11 # Card - title: Client management @@ -190,23 +204,21 @@ additionalContent: - title: More Windows resources # < 60 chars (optional) items: # Card - - title: Windows 11 product site - summary: Find out more about Windows 11 for enterprise and Windows 11 for business + - title: Windows product site + summary: Find out how Windows enables your business to do more url: https://www.microsoft.com/microsoft-365/windows + - title: "Windows 11: A new era for the PC begins today" + summary: Blog article that describes how Windows 11 empowers you to produce and inspires you to create + url: https://blogs.windows.com/windowsexperience/2021/10/04/windows-11-a-new-era-for-the-pc-begins-today/ + - title: Windows IT Pro blogs + summary: The latest Windows blog articles for the IT Pro + url: https://techcommunity.microsoft.com/t5/windows-it-pro-blog/bg-p/Windows10Blog - title: Windows blogs summary: Keep up with the latest news about Windows url: https://blogs.windows.com/ - - title: "Planning for Windows 11: best practices for organizations" - summary: Blog article with best practices to help you plan for Windows 11 - url: https://aka.ms/Windows/blog002 - - title: Windows 11 security explained - summary: Blog article to learn how Windows 11 enables security by design from the chip to the cloud - url: https://aka.ms/Windows/blog010 - # Card - title: Participate in the Tech Community summary: Learn how to be part of the Windows Tech Community url: https://techcommunity.microsoft.com/t5/windows/ct-p/Windows10 - # Card - title: Ask the community summary: Get help, and help others url: https://answers.microsoft.com/windows/forum @@ -221,6 +233,10 @@ additionalContent: url: /mem/endpoint-manager-overview - text: Getting started with Microsoft Endpoint Manager url: /mem/endpoint-manager-getting-started + - text: Microsoft Endpoint Manager simplifies upgrades to Windows 11 + url: https://techcommunity.microsoft.com/t5/microsoft-endpoint-manager-blog/endpoint-manager-simplifies-upgrades-to-windows-11/ba-p/2771886 + - text: Understanding readiness for Windows 11 with Microsoft Endpoint Manager + url: https://techcommunity.microsoft.com/t5/microsoft-endpoint-manager-blog/understanding-readiness-for-windows-11-with-microsoft-endpoint/ba-p/2770866 - text: Microsoft Endpoint Manager blog url: https://aka.ms/memblog - title: Windows 365 @@ -229,8 +245,11 @@ additionalContent: url: /windows-365 - text: What is Windows 365 url: /windows-365/overview + - text: Windows 365 Enterprise now supports Windows 11 + url: https://techcommunity.microsoft.com/t5/windows-it-pro-blog/windows-365-enterprise-now-supports-windows-11/ba-p/2810334 - text: Windows 365 blog url: https://www.microsoft.com/microsoft-365/blog/ + - title: Windows Server links: - text: Windows Server documentation @@ -240,4 +259,4 @@ additionalContent: - text: Get started with Windows Server url: /windows-server/get-started/get-started-with-windows-server - text: Windows Server blog - url: https://cloudblogs.microsoft.com/windowsserver/ \ No newline at end of file + url: https://cloudblogs.microsoft.com/windowsserver/