diff --git a/education/windows/set-up-school-pcs-technical.md b/education/windows/set-up-school-pcs-technical.md index 91f46eb988..3de8d5b795 100644 --- a/education/windows/set-up-school-pcs-technical.md +++ b/education/windows/set-up-school-pcs-technical.md @@ -105,131 +105,258 @@ The **Set up School PCs** app produces a specialized provisioning package that m > **Important**: It is not recommended to set additional policies on PCs configured with the **Set up School PCs** app. The shared PC mode has been optimized to be fast and reliable over time with minimal to no manual maintenance required - - - +

Policy name

Value

When set

+ + + + + - + - + - + - + - + - + - + - + - + - + - + - - - + - + - + - + - + - - - + + + - + - + - - + + - + - + + + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - - + +

Policy name

Value

When set

Admin Templates > Control Panel > + +Personalization

Admin Templates > Control Panel > Personalization

Prevent enabling lock screen slide show

Enabled

Always

Prevent enabling lock screen slide show

Enabled

Always

Do not display the lock screen

Enabled

Only on Windows 10 Pro for EDU, Enterprise, + +Enterprise for EDU

Always

Do not display the lock screen

Enabled

Only on Windows 10 Pro for EDU, Enterprise, Enterprise for EDU

Always

Prevent changing lock screen and logon image

Enabled

Always

Prevent changing lock screen and logon image

Enabled

Always

Admin Templates > System > Power Management > + +Button Settings

Admin Templates > System > Power Management > Button Settings

Select the Power button action (plugged in)

Sleep

+ +SetPowerPolicies=True

Select the Power button action (plugged in)

Sleep

SetPowerPolicies=True

Select the Power button action (on battery)

Sleep

SetPowerPolicies=True

Select the Power button action (on battery)

Sleep

SetPowerPolicies=True

Select the Sleep button action (plugged in)

Sleep

SetPowerPolicies=True

Select the Sleep button action (plugged in)

Sleep

SetPowerPolicies=True

Select the lid switch action (plugged in)

Sleep

SetPowerPolicies=True

Select the lid switch action (plugged in)

Sleep

SetPowerPolicies=True

Select the lid switch action (on battery)

Sleep

SetPowerPolicies=True

Select the lid switch action (on battery)

Sleep

SetPowerPolicies=True

Admin Templates > System > Power Management > + +Sleep Settings

Admin Templates > System > Power Management > Sleep Settings

Require a password when a computer wakes (plugged in)

Enabled

SignInOnResume = True

Require a password when a computer wakes (plugged in)

Enabled

SignInOnResume = True

Require a password when a computer wakes (on battery)

Enabled

SignInOnResume = True

Require a password when a computer wakes (on battery)

Enabled

SignInOnResume = True

Specify the system sleep timeout (plugged in)

SleepTimeout

SetPowerPolicies=True

Specify the system sleep timeout (plugged in)

SleepTimeout

SetPowerPolicies=True

Specify the system sleep timeout (on battery)

SleepTimeout

SetPowerPolicies=True

Specify the system sleep timeout (on battery)

SleepTimeout

SetPowerPolicies=True

Turn off hybrid sleep (plugged in)

Enabled

SetPowerPolicies=True

Turn off hybrid sleep (plugged in)

Enabled

+ +SetPowerPolicies=True

Turn off hybrid sleep (on battery)

Enabled

SetPowerPolicies=True

Turn off hybrid sleep (on battery)

Enabled

+ +SetPowerPolicies=True

Specify the unattended sleep timeout (plugged in)

SleepTimeout

SetPowerPolicies=True

Specify the unattended sleep timeout (on battery)

SleepTimeout

SetPowerPolicies=True

Allow standby states (S1-S3) when sleeping (plugged in)

Enabled

SetPowerPolicies=True

Specify the unattended sleep timeout (plugged in)

SleepTimeout

+ +

SetPowerPolicies=True

Specify the unattended sleep timeout (on battery)

SleepTimeout

+ +

SetPowerPolicies=True

Allow standby states (S1-S3) when sleeping (plugged in)

Enabled

SetPowerPolicies=True

Allow standby states (S1-S3) when sleeping (on battery)

Enabled

SetPowerPolicies=True

Allow standby states (S1-S3) when sleeping (on battery)

Enabled

SetPowerPolicies=True

Specify the system hibernate timeout (plugged in)

Enabled, 0

SetPowerPolicies=True

Specify the system hibernate timeout (plugged in)

Enabled, 0

SetPowerPolicies=True

Specify the system hibernate timeout (on battery)

Enabled, 0

SetPowerPolicies=True

Admin Templates > System > Power Management > Video and Display Settings

Turn off the display (plugged in)

SleepTimeout

SetPowerPolicies=True

Turn off the display (on battery

SleepTimeout

SetPowerPolicies=True

Specify the system hibernate timeout (on battery)

Enabled, 0

SetPowerPolicies=True

Admin Templates > + +System > Power Management > Video and Display Settings

Turn off the display (plugged in)

SleepTimeout

SetPowerPolicies=True

Turn off the display (on battery

SleepTimeout

SetPowerPolicies=True

Admin Templates > System > Logon

Show first sign-in animation

Disabled

Always

Show first sign-in animation

Disabled

Always + +

Hide entry points for Fast User Switching

Enabled

Always

Turn on convenience PIN sign-in

Disabled

Always

Hide entry points for Fast User Switching

Enabled

+ +

Always

Turn on convenience PIN sign-in

Disabled

Always

Turn off picture password sign-in

Enabled

Always

Turn off picture password sign-in

Enabled

Always + +

Turn off app notification on the lock screen

Enabled

Always

Turn off app notification on the lock screen

Enabled

+ +

Always

Allow users to select when a password is required when resuming from connected standby

Disabled

SignInOnResume = True

Allow users to select when a password is required when resuming from connected standby

Disabled

SignInOnResume = True

Block user from showing account details on sign-in

Enabled

Always

Block user from showing account details on sign-in

Enabled

Always

Admin Templates > System > User Profiles

Admin Templates > System > User Profiles

+ +

Turn off the advertising ID

Enabled

SetEduPolicies = True

Turn off the advertising ID

Enabled

+ +SetEduPolicies = True

Admin Templates > Windows Components

Do not show Windows Tips

Enabled

SetEduPolicies = True

Do not show Windows Tips

Enabled

SetEduPolicies + += True

Turn off Microsoft consumer experiences

Enabled

SetEduPolicies = True

Turn off Microsoft consumer experiences

Enabled

+ +SetEduPolicies = True

Microsoft Passport for Work

Disabled

Always

Microsoft Passport for Work

Disabled

Always

+ +

Prevent the usage of OneDrive for file storage

Enabled

Always

Prevent the usage of OneDrive for file storage

Enabled

Always

Admin Templates > Windows Components > Biometrics

Admin Templates > Windows Components > + +Biometrics

Allow the use of biometrics

Disabled

Always

Allow the use of biometrics

Disabled

Always

+ +

Allow users to log on using biometrics

Disabled

Always

Allow users to log on using biometrics

Disabled

+ +Always

Allow domain users to log on using biometrics

Disabled

Always

Allow domain users to log on using biometrics

Disabled

Always

Admin Templates > Windows Components > Data Collection and Preview Builds

Admin Templates > Windows Components > Data Collection + +and Preview Builds

Toggle user control over Insider builds

Disabled

Always

Toggle user control over Insider builds

Disabled

+ +Always

Disable pre-release features or settings

Disabled

Always

Disable pre-release features or settings

Disabled

+ +

Always

Do not show feedback notifications

Enabled

Always

Do not show feedback notifications

Enabled

+ +Always

Admin Templates > Windows Components > File Explorer

Admin Templates > Windows Components > File + +Explorer

Show lock in the user tile menu

Disabled

Always

Show lock in the user tile menu

Disabled

Always + +

Admin Templates > Windows Components > Maintenance Scheduler

Admin Templates > Windows Components > Maintenance + +Scheduler

Automatic Maintenance Activation Boundary

MaintenanceStartTime

Always

Automatic Maintenance Activation Boundary

MaintenanceStartTime

+ +

Always

Automatic Maintenance Random Delay

Enabled, 2 hours

Always

Automatic Maintenance Random Delay

Enabled, 2 hours

+ +

Always

Automatic Maintenance WakeUp Policy

Enabled

Always

Automatic Maintenance WakeUp Policy

Enabled

+ +Always

Admin Templates > Windows Components > Microsoft Edge

Admin Templates > Windows Components > Microsoft + +Edge

Open a new tab with an empty tab

Disabled

SetEduPolicies = True

Open a new tab with an empty tab

Disabled

+ +SetEduPolicies = True

Configure corporate home pages

Enabled, about:blank

SetEduPolicies = True

Configure corporate home pages

Enabled, about:blank

+ +

SetEduPolicies = True

Admin Templates > Windows Components > Search

Admin Templates > Windows Components > Search + +

Allow Cortana

Disabled

SetEduPolicies = True

Allow Cortana

Disabled

SetEduPolicies = True + +

Windows Settings > Security Settings > Local Policies > Security Options

Windows Settings > Security Settings > Local + +Policies > Security Options

Interactive logon: Do not display last user name

- Enabled

- Disabled when account model is only guest

Always

Interactive logon: Do not display last user name

- Enabled

- Disabled + +when account model is only guest

Always

Interactive logon: Sign-in last interactive user automatically after a system-initiated restart

Disabled

Always

Interactive logon: Sign-in last interactive user automatically after a system-initiated restart

Disabled

Always

Shutdown: Allow system to be shut down without having to log on

Disabled

Always

Shutdown: Allow system to be shut down without having to log on

Disabled

+ +

Always

User Account Control: Behavior of the elevation prompt for standard users

Auto deny

Always

User Account Control: Behavior of the elevation prompt for standard users

Auto + +deny

Always