From 9fed7e965f37229f84fe720070be290f6f475e2a Mon Sep 17 00:00:00 2001 From: Meghana Athavale Date: Tue, 28 Sep 2021 16:58:16 +0530 Subject: [PATCH] Updated with review changes --- .../mdm/policy-csp-admx-grouppolicy.md | 1 + .../mdm/policy-csp-admx-logon.md | 20 ++--- ...icy-csp-admx-microsoftdefenderantivirus.md | 86 +++++++++---------- .../mdm/policy-csp-admx-msi.md | 4 +- 4 files changed, 51 insertions(+), 60 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-admx-grouppolicy.md b/windows/client-management/mdm/policy-csp-admx-grouppolicy.md index 793fb78ddb..f6360ba2ae 100644 --- a/windows/client-management/mdm/policy-csp-admx-grouppolicy.md +++ b/windows/client-management/mdm/policy-csp-admx-grouppolicy.md @@ -205,6 +205,7 @@ manager: dansimp > [!div class = "checklist"] > * Device +> * User
diff --git a/windows/client-management/mdm/policy-csp-admx-logon.md b/windows/client-management/mdm/policy-csp-admx-logon.md index 8e229d1626..186c87c708 100644 --- a/windows/client-management/mdm/policy-csp-admx-logon.md +++ b/windows/client-management/mdm/policy-csp-admx-logon.md @@ -268,11 +268,7 @@ ADMX Info: This policy setting ignores the customized run list. -You can create a customized list of additional programs and documents that the system starts automatically when it runs on Windows Vista, Windows XP Professional, and Windows 2000 Professional. These programs are added to the standard run list of programs and services that the system starts. - -If you enable this policy setting, the system ignores the run list for Windows Vista, Windows XP Professional, and Windows 2000 Professional. - -If you disable or do not configure this policy setting, Windows Vista adds any customized run list configured to its run list. +These programs are added to the standard run list of programs and services that the system starts. This policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration. @@ -345,11 +341,7 @@ ADMX Info: This policy setting ignores the customized run list. -You can create a customized list of additional programs and documents that the system starts automatically when it runs on Windows Vista, Windows XP Professional, and Windows 2000 Professional. These programs are added to the standard run list of programs and services that the system starts. - -If you enable this policy setting, the system ignores the run list for Windows Vista, Windows XP Professional, and Windows 2000 Professional. - -If you disable or do not configure this policy setting, Windows Vista adds any customized run list configured to its run list. +These programs are added to the standard run list of programs and services that the system starts. This policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration. @@ -714,7 +706,7 @@ ADMX Info: -This policy setting hides the welcome screen that is displayed on Windows 2000 Professional each time the user logs on. +This policy setting hides the welcome screen that is displayed on Windows each time the user logs on. If you enable this policy setting, the welcome screen is hidden from the user logging on to a computer where this policy is applied. @@ -722,7 +714,7 @@ Users can still display the welcome screen by selecting it on the Start menu or If you disable or do not configure this policy, the welcome screen is displayed each time a user logs on to the computer. -This setting applies only to Windows 2000 Professional. It does not affect the "Configure Your Server on a Windows 2000 Server" screen on Windows 2000 Server. +This setting applies only to Windows. It does not affect the "Configure Your Server on a Windows Server" screen on Windows Server. > [!NOTE] > This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration. @@ -795,13 +787,13 @@ ADMX Info: -This policy setting hides the welcome screen that is displayed on Windows 2000 Professional each time the user logs on. +This policy setting hides the welcome screen that is displayed on Windows each time the user logs on. If you enable this policy setting, the welcome screen is hidden from the user logging on to a computer where this policy is applied. Users can still display the welcome screen by selecting it on the Start menu or by typing "Welcome" in the Run dialog box. -If you disable or do not configure this policy, the welcome screen is displayed each time a user logs on to the computer. This setting applies only to Windows 2000 Professional. It does not affect the "Configure Your Server on a Windows 2000 Server" screen on Windows 2000 Server. +If you disable or do not configure this policy, the welcome screen is displayed each time a user logs on to the computer. This setting applies only to Windows. It does not affect the "Configure Your Server on a Windows Server" screen on Windows Server. > [!NOTE] > This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration. diff --git a/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md b/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md index 86d6dee6ba..e5b1bcf653 100644 --- a/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md +++ b/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md @@ -584,7 +584,7 @@ This feature ensures the device checks in real time with the Microsoft Active Pr Enabled – The Block at First Sight setting is turned on. Disabled – The Block at First Sight setting is turned off. -This feature requires these Group Policy settings to be set as follows: +This feature requires these Policy settings to be set as follows: - MAPS -> The “Join Microsoft MAPS” must be enabled or the “Block at First Sight” feature will not function. - MAPS -> The “Send file samples when further analysis is required” should be set to 1 (Send safe samples) or 3 (Send all samples). Setting to 0 (Always Prompt) will lower the protection state of the device. Setting to 2 (Never send) means the “Block at First Sight” feature will not function. @@ -655,11 +655,11 @@ ADMX Info: -This policy setting controls whether or not complex list settings configured by a local administrator are merged with Group Policy settings. This setting applies to lists such as threats and Exclusions. +This policy setting controls whether or not complex list settings configured by a local administrator are merged with Policy settings. This setting applies to lists such as threats and Exclusions. -If you enable or do not configure this setting, unique items defined in Group Policy and in preference settings configured by the local administrator will be merged into the resulting effective policy. In the case of conflicts, Group policy Settings will override preference settings. +If you enable or do not configure this setting, unique items defined in Policy and in preference settings configured by the local administrator will be merged into the resulting effective policy. In the case of conflicts, Policy Settings will override preference settings. -If you disable this setting, only items defined by Group Policy will be used in the resulting effective policy. Group Policy settings will override preference settings configured by the local administrator. +If you disable this setting, only items defined by Policy will be used in the resulting effective policy. Policy settings will override preference settings configured by the local administrator. @@ -1915,11 +1915,11 @@ ADMX Info: -This policy setting configures a local override for the configuration of the number of days items should be kept in the Quarantine folder before being removed. This setting can only be set by Group Policy. +This policy setting configures a local override for the configuration of the number of days items should be kept in the Quarantine folder before being removed. This setting can only be set by Policy. -If you enable this setting, the local preference setting will take priority over Group Policy. +If you enable this setting, the local preference setting will take priority over Policy. -If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. +If you disable or do not configure this setting, Policy will take priority over the local preference setting. @@ -2545,11 +2545,11 @@ ADMX Info: -This policy setting configures a local override for the configuration of behavior monitoring. This setting can only be set by Group Policy. +This policy setting configures a local override for the configuration of behavior monitoring. This setting can only be set by Policy. -If you enable this setting, the local preference setting will take priority over Group Policy. +If you enable this setting, the local preference setting will take priority over Policy. -If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. +If you disable or do not configure this setting, Policy will take priority over the local preference setting. @@ -2615,11 +2615,11 @@ ADMX Info: -This policy setting configures a local override for the configuration of scanning for all downloaded files and attachments. This setting can only be set by Group Policy. +This policy setting configures a local override for the configuration of scanning for all downloaded files and attachments. This setting can only be set by Policy. -If you enable this setting, the local preference setting will take priority over Group Policy. +If you enable this setting, the local preference setting will take priority over Policy. -If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. +If you disable or do not configure this setting, Policy will take priority over the local preference setting. @@ -2685,11 +2685,11 @@ ADMX Info: -This policy setting configures a local override for the configuration of monitoring for file and program activity on your computer. This setting can only be set by Group Policy. +This policy setting configures a local override for the configuration of monitoring for file and program activity on your computer. This setting can only be set by Policy. -If you enable this setting, the local preference setting will take priority over Group Policy. +If you enable this setting, the local preference setting will take priority over Policy. -If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. +If you disable or do not configure this setting, Policy will take priority over the local preference setting. @@ -2755,11 +2755,11 @@ ADMX Info: -This policy setting configures a local override for the configuration to turn on real-time protection. This setting can only be set by Group Policy. +This policy setting configures a local override for the configuration to turn on real-time protection. This setting can only be set by Policy. -If you enable this setting, the local preference setting will take priority over Group Policy. +If you enable this setting, the local preference setting will take priority over Policy. -If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. +If you disable or do not configure this setting, Policy will take priority over the local preference setting. @@ -2825,11 +2825,11 @@ ADMX Info: -This policy setting configures a local override for the configuration of monitoring for incoming and outgoing file activity. This setting can only be set by Group Policy. +This policy setting configures a local override for the configuration of monitoring for incoming and outgoing file activity. This setting can only be set by Policy. -If you enable this setting, the local preference setting will take priority over Group Policy. +If you enable this setting, the local preference setting will take priority over Policy. -If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. +If you disable or do not configure this setting, Policy will take priority over the local preference setting. @@ -2895,11 +2895,11 @@ ADMX Info: -This policy setting configures a local override for the configuration of the time to run a scheduled full scan to complete remediation. This setting can only be set by Group Policy. +This policy setting configures a local override for the configuration of the time to run a scheduled full scan to complete remediation. This setting can only be set by Policy. -If you enable this setting, the local preference setting will take priority over Group Policy. +If you enable this setting, the local preference setting will take priority over Policy. -If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. +If you disable or do not configure this setting, Policy will take priority over the local preference setting. @@ -4497,11 +4497,11 @@ ADMX Info: -This policy setting configures a local override for the configuration of maximum percentage of CPU utilization during scan. This setting can only be set by Group Policy. +This policy setting configures a local override for the configuration of maximum percentage of CPU utilization during scan. This setting can only be set by Policy. -If you enable this setting, the local preference setting will take priority over Group Policy. +If you enable this setting, the local preference setting will take priority over Policy. -If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. +If you disable or do not configure this setting, Policy will take priority over the local preference setting. @@ -4567,11 +4567,11 @@ ADMX Info: -This policy setting configures a local override for the configuration of the scan type to use during a scheduled scan. This setting can only be set by Group Policy. +This policy setting configures a local override for the configuration of the scan type to use during a scheduled scan. This setting can only be set by Policy. -If you enable this setting, the local preference setting will take priority over Group Policy. +If you enable this setting, the local preference setting will take priority over Policy. -If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. +If you disable or do not configure this setting, Policy will take priority over the local preference setting. @@ -4637,11 +4637,11 @@ ADMX Info: -This policy setting configures a local override for the configuration of scheduled scan day. This setting can only be set by Group Policy. +This policy setting configures a local override for the configuration of scheduled scan day. This setting can only be set by Policy. -If you enable this setting, the local preference setting will take priority over Group Policy. +If you enable this setting, the local preference setting will take priority over Policy. -If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. +If you disable or do not configure this setting, Policy will take priority over the local preference setting. @@ -4707,11 +4707,11 @@ ADMX Info: -This policy setting configures a local override for the configuration of scheduled quick scan time. This setting can only be set by Group Policy. +This policy setting configures a local override for the configuration of scheduled quick scan time. This setting can only be set by Policy. -If you enable this setting, the local preference setting will take priority over Group Policy. +If you enable this setting, the local preference setting will take priority over Policy. -If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. +If you disable or do not configure this setting, Policy will take priority over the local preference setting. @@ -4777,11 +4777,11 @@ ADMX Info: -This policy setting configures a local override for the configuration of scheduled scan time. This setting can only be set by Group Policy. +This policy setting configures a local override for the configuration of scheduled scan time. This setting can only be set by Policy. -If you enable this setting, the local preference setting will take priority over Group Policy. +If you enable this setting, the local preference setting will take priority over Policy. -If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. +If you disable or do not configure this setting, Policy will take priority over the local preference setting. @@ -6565,11 +6565,11 @@ ADMX Info: - This policy setting configures a local override for the configuration to join Microsoft MAPS. This setting can only be set by Group Policy. + This policy setting configures a local override for the configuration to join Microsoft MAPS. This setting can only be set by Policy. -If you enable this setting, the local preference setting will take priority over Group Policy. +If you enable this setting, the local preference setting will take priority over Policy. -If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. +If you disable or do not configure this setting, Policy will take priority over the local preference setting. diff --git a/windows/client-management/mdm/policy-csp-admx-msi.md b/windows/client-management/mdm/policy-csp-admx-msi.md index 95b1e859e7..b27f5623cc 100644 --- a/windows/client-management/mdm/policy-csp-admx-msi.md +++ b/windows/client-management/mdm/policy-csp-admx-msi.md @@ -678,7 +678,7 @@ This policy setting restricts the use of Windows Installer. If you enable this policy setting, you can prevent users from installing software on their systems or permit users to install only those programs offered by a system administrator. You can use the options in the Disable Windows Installer box to establish an installation setting. -- The "Never" option indicates Windows Installer is fully enabled. Users can install and upgrade software. This is the default behavior for Windows Installer on Windows 2000 Professional, Windows XP Professional and Windows Vista when the policy is not configured. +- The "Never" option indicates Windows Installer is fully enabled. Users can install and upgrade software. - The "For non-managed applications only" option permits users to install only those programs that a system administrator assigns (offers on the desktop) or publishes (adds them to Add or Remove Programs). This is the default behavior of Windows Installer on Windows Server 2003 family when the policy is not configured. @@ -1871,8 +1871,6 @@ This policy setting is designed for enterprises to prevent unauthorized or malic If you disable this policy setting, Windows Installer stores transform files in the Application Data directory in the user's profile. -If you do not configure this policy setting on Windows 2000 Professional, Windows XP Professional and Windows Vista, when a user reinstalls, removes, or repairs an installation, the transform file is available, even if the user is on a different computer or is not connected to the network. -