From c3e79c3f121bc9838b1d3eb645bbfdac4bf44fd3 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Fri, 15 Mar 2024 10:35:55 -0400 Subject: [PATCH] updates --- .../images/icons/certificate.svg | 3 + .../images/icons/fingerprint.svg | 4 +- windows/configuration/images/icons/folder.svg | 3 + .../images/icons/information.svg | 6 +- .../configuration/images/icons/insider.svg | 3 + windows/configuration/images/icons/kiosk.svg | 3 + windows/configuration/images/icons/lock.svg | 3 + .../configuration/images/icons/package.svg | 3 + .../configuration/images/icons/pin-code.svg | 3 + windows/configuration/images/icons/pin.svg | 4 +- windows/configuration/images/icons/power.svg | 4 +- windows/configuration/images/icons/sc.svg | 3 + .../configuration/images/icons/settings.svg | 3 + windows/configuration/images/icons/start.svg | 3 + .../images/icons/subscription.svg | 3 + windows/configuration/images/icons/user.svg | 3 + windows/configuration/images/icons/vsc.svg | 3 + windows/configuration/start/configure.md | 136 ++++++++++++++++++ 18 files changed, 184 insertions(+), 9 deletions(-) create mode 100644 windows/configuration/images/icons/certificate.svg create mode 100644 windows/configuration/images/icons/folder.svg create mode 100644 windows/configuration/images/icons/insider.svg create mode 100644 windows/configuration/images/icons/kiosk.svg create mode 100644 windows/configuration/images/icons/lock.svg create mode 100644 windows/configuration/images/icons/package.svg create mode 100644 windows/configuration/images/icons/pin-code.svg create mode 100644 windows/configuration/images/icons/sc.svg create mode 100644 windows/configuration/images/icons/settings.svg create mode 100644 windows/configuration/images/icons/start.svg create mode 100644 windows/configuration/images/icons/subscription.svg create mode 100644 windows/configuration/images/icons/user.svg create mode 100644 windows/configuration/images/icons/vsc.svg create mode 100644 windows/configuration/start/configure.md diff --git a/windows/configuration/images/icons/certificate.svg b/windows/configuration/images/icons/certificate.svg new file mode 100644 index 0000000000..956bfc1e42 --- /dev/null +++ b/windows/configuration/images/icons/certificate.svg @@ -0,0 +1,3 @@ + + + diff --git a/windows/configuration/images/icons/fingerprint.svg b/windows/configuration/images/icons/fingerprint.svg index 8478bc79f4..2494d65659 100644 --- a/windows/configuration/images/icons/fingerprint.svg +++ b/windows/configuration/images/icons/fingerprint.svg @@ -1,3 +1,3 @@ - - + + diff --git a/windows/configuration/images/icons/folder.svg b/windows/configuration/images/icons/folder.svg new file mode 100644 index 0000000000..7860c2a8ab --- /dev/null +++ b/windows/configuration/images/icons/folder.svg @@ -0,0 +1,3 @@ + + + diff --git a/windows/configuration/images/icons/information.svg b/windows/configuration/images/icons/information.svg index bc692eabb9..4a33944103 100644 --- a/windows/configuration/images/icons/information.svg +++ b/windows/configuration/images/icons/information.svg @@ -1,3 +1,3 @@ - - - \ No newline at end of file + + + diff --git a/windows/configuration/images/icons/insider.svg b/windows/configuration/images/icons/insider.svg new file mode 100644 index 0000000000..fa002fa2a1 --- /dev/null +++ b/windows/configuration/images/icons/insider.svg @@ -0,0 +1,3 @@ + + + diff --git a/windows/configuration/images/icons/kiosk.svg b/windows/configuration/images/icons/kiosk.svg new file mode 100644 index 0000000000..f975677d19 --- /dev/null +++ b/windows/configuration/images/icons/kiosk.svg @@ -0,0 +1,3 @@ + + + diff --git a/windows/configuration/images/icons/lock.svg b/windows/configuration/images/icons/lock.svg new file mode 100644 index 0000000000..ccd1850fbb --- /dev/null +++ b/windows/configuration/images/icons/lock.svg @@ -0,0 +1,3 @@ + + + diff --git a/windows/configuration/images/icons/package.svg b/windows/configuration/images/icons/package.svg new file mode 100644 index 0000000000..99c1148922 --- /dev/null +++ b/windows/configuration/images/icons/package.svg @@ -0,0 +1,3 @@ + + + diff --git a/windows/configuration/images/icons/pin-code.svg b/windows/configuration/images/icons/pin-code.svg new file mode 100644 index 0000000000..a5bfdc4148 --- /dev/null +++ b/windows/configuration/images/icons/pin-code.svg @@ -0,0 +1,3 @@ + + + diff --git a/windows/configuration/images/icons/pin.svg b/windows/configuration/images/icons/pin.svg index fd5366b1e9..64426df32c 100644 --- a/windows/configuration/images/icons/pin.svg +++ b/windows/configuration/images/icons/pin.svg @@ -1,3 +1,3 @@ - - + + diff --git a/windows/configuration/images/icons/power.svg b/windows/configuration/images/icons/power.svg index 1859eb5c64..e74606b72c 100644 --- a/windows/configuration/images/icons/power.svg +++ b/windows/configuration/images/icons/power.svg @@ -1,3 +1,3 @@ - - + + diff --git a/windows/configuration/images/icons/sc.svg b/windows/configuration/images/icons/sc.svg new file mode 100644 index 0000000000..d1924ffebb --- /dev/null +++ b/windows/configuration/images/icons/sc.svg @@ -0,0 +1,3 @@ + + + diff --git a/windows/configuration/images/icons/settings.svg b/windows/configuration/images/icons/settings.svg new file mode 100644 index 0000000000..36da6757f2 --- /dev/null +++ b/windows/configuration/images/icons/settings.svg @@ -0,0 +1,3 @@ + + + diff --git a/windows/configuration/images/icons/start.svg b/windows/configuration/images/icons/start.svg new file mode 100644 index 0000000000..a3e6c3d8e8 --- /dev/null +++ b/windows/configuration/images/icons/start.svg @@ -0,0 +1,3 @@ + + + diff --git a/windows/configuration/images/icons/subscription.svg b/windows/configuration/images/icons/subscription.svg new file mode 100644 index 0000000000..ffa73c424e --- /dev/null +++ b/windows/configuration/images/icons/subscription.svg @@ -0,0 +1,3 @@ + + + diff --git a/windows/configuration/images/icons/user.svg b/windows/configuration/images/icons/user.svg new file mode 100644 index 0000000000..76c0b2ce5d --- /dev/null +++ b/windows/configuration/images/icons/user.svg @@ -0,0 +1,3 @@ + + + diff --git a/windows/configuration/images/icons/vsc.svg b/windows/configuration/images/icons/vsc.svg new file mode 100644 index 0000000000..cbf23de89e --- /dev/null +++ b/windows/configuration/images/icons/vsc.svg @@ -0,0 +1,3 @@ + + + diff --git a/windows/configuration/start/configure.md b/windows/configuration/start/configure.md new file mode 100644 index 0000000000..d0b744ea33 --- /dev/null +++ b/windows/configuration/start/configure.md @@ -0,0 +1,136 @@ +--- +title: Configure the Start menu +description: Learn about the available options to configure the Windows Start menu and how to configure them via Configuration Service Providers (CSP) or group policy (GPO). +ms.topic: how-to +ms.date: 03/15/2024 +--- + +# Configure the Start menu + +To configure the Start menu, you can use one of the following options: + +- Configuration Service Provider (CSP): this option is commonly used for devices managed by a Mobile Device Management (MDM) solution, like Microsoft Intune. The [Start Policy CSP][WIN-1] is used to configure the Start menu. +- Group policy (GPO): this option can be used for devices that are joined to an Active Directory domain and aren't managed by a device management solution. Group policy can also be used for devices that aren't joined to an Active Directory domain, using the local group policy editor + +> [!NOTE] +> While many of the Start menu policy settings can be configured using both CSP and GPO, there are some settings that are only available using the Start Policy CSP. + +## Policy settings + +This section describes the policy settings to configure the Start menu via configuration service provider (CSP) and group policy (GPO). + +### Policy settings list + +The list of settings is sorted alphabetically and organized in four categories: + +- **Start layout**: settings to control the Start menu layout +- **Pinned folders**: settings to control the folders pinned for quick access +- **User options**: settings to control the options exposed when selecting the user icon +- **Power options**: settings to control the options exposed when selecting the power icon + +Select one of the tabs to see the list of available settings: + +#### [:::image type="icon" source="../images/icons/start.svg"::: **Start layout**](#tab/start) + +The following table lists the policies that control the Start menu layout. Select the policy name for more details. + + +|Policy name| CSP | GPO | +|-|-|-| +|[Allow standard user encryption](#allow-standard-user-encryption)|✅|❌| +|[Choose default folder for recovery password](#choose-default-folder-for-recovery-password)|❌|✅| +|[Choose drive encryption method and cipher strength](#choose-drive-encryption-method-and-cipher-strength)|✅|✅| +|[Configure recovery password rotation](#configure-recovery-password-rotation)|✅|❌| +|[Disable new DMA devices when this computer is locked](#disable-new-dma-devices-when-this-computer-is-locked)|❌|✅| +|[Prevent memory overwrite on restart](#prevent-memory-overwrite-on-restart)|❌|✅| +|[Provide the unique identifiers for your organization](#provide-the-unique-identifiers-for-your-organization)|✅|✅| +|[Require device encryption](#require-device-encryption)|✅|❌| +|[Validate smart card certificate usage rule compliance](#validate-smart-card-certificate-usage-rule-compliance)|❌|✅| + +[!INCLUDE [allow-standard-user-encryption](includes/allow-standard-user-encryption.md)] +[!INCLUDE [choose-default-folder-for-recovery-password](includes/choose-default-folder-for-recovery-password.md)] +[!INCLUDE [choose-drive-encryption-method-and-cipher-strength](includes/choose-drive-encryption-method-and-cipher-strength.md)] +[!INCLUDE [configure-recovery-password-rotation](includes/configure-recovery-password-rotation.md)] +[!INCLUDE [disable-new-dma-devices-when-this-computer-is-locked](includes/disable-new-dma-devices-when-this-computer-is-locked.md)] +[!INCLUDE [prevent-memory-overwrite-on-restart](includes/prevent-memory-overwrite-on-restart.md)] +[!INCLUDE [provide-the-unique-identifiers-for-your-organization](includes/provide-the-unique-identifiers-for-your-organization.md)] +[!INCLUDE [require-device-encryption](includes/require-device-encryption.md)] +[!INCLUDE [validate-smart-card-certificate-usage-rule-compliance](includes/validate-smart-card-certificate-usage-rule-compliance.md)] +--> + +#### [:::image type="icon" source="../images/icons/folder.svg"::: **Pinned folders**](#tab/folders) + +#### [:::image type="icon" source="../images/icons/user.svg"::: **User options**](#tab/user) + +#### [:::image type="icon" source="../images/icons/power.svg"::: **Power options**](#tab/power) + +--- + +## Next steps + +> [!div class="nextstepaction"] +> Review the . +> +> +> [guide >](guide.md) + + + +[WIN-1]: /windows/client-management/mdm/policy-csp-start + + +