deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-29 05:37:22 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Update assigned-access-configuration-file.md with new Windows 10 version 1809 feature

Browse Source
This commit is contained in:
Paolo Matarazzo 2024-02-25 18:51:12 -05:00
parent 41b502443d
commit c55c20bb18
1 changed files with 41 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

42
windows/configuration/assigned-access/assigned-access-configuration-file.md
View File

@ -477,10 +477,11 @@ Group accounts are specified using `<UserGroup>`. Nested groups aren't supported
::: zone-end
::: zone pivot="windows-10"
### FileExplorerNamespaceRestrictions
Starting in Windows 10 version 1809, you can explicitly allow some known folders to be accessed when the user tries to open the file dialog box in multi-app assigned access by including **FileExplorerNamespaceRestrictions** in your XML file. Currently, **Downloads** is the only folder supported. This behavior can also be set using Microsoft Intune.
You can explicitly allow access to known folders when the user tries to open the file dialog box in a restricted user experience by including the `FileExplorerNamespaceRestrictions` node.
The following example shows how to allow user access to the Downloads folder in the common file dialog box.
@ -596,6 +597,8 @@ The following example shows how to allow user access to the Downloads folder in
:::column-end:::
:::row-end:::
::: zone-end
<!--troubleshooting
Event Viewer
Run "eventvwr.msc"
@ -854,6 +857,43 @@ Below sample shows dedicated profile and global profile mixed usage, a user woul
```
```xml
<?xml version="1.0" encoding="utf-8" ?>
<AssignedAccessConfiguration
xmlns="http://schemas.microsoft.com/AssignedAccess/2017/config"
xmlns:rs5="http://schemas.microsoft.com/AssignedAccess/201810/config"
xmlns:v3="http://schemas.microsoft.com/AssignedAccess/2020/config"
xmlns:v4="http://schemas.microsoft.com/AssignedAccess/2021/config"
>
<Profiles>
<Profile Id="{EDB3036B-780D-487D-A375-69369D8A8F79}">
<AllAppsList>
<AllowedApps>
<App AppUserModelId="Microsoft.BingWeather_8wekyb3d8bbwe!App" rs5:AutoLaunch="true" />
<App AppUserModelId="Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge" />
<App DesktopAppPath="%SystemRoot%\system32\notepad.exe"/>
</AllowedApps>
</AllAppsList>
<Taskbar ShowTaskbar="false"/>
</Profile>
<Profile Id="{EDB3036B-780D-487D-A375-69369D8A8F78}">
<KioskModeApp AppUserModelId="Microsoft.BingWeather_8wekyb3d8bbwe!App" />
</Profile>
</Profiles>
<Configs>
<v3:GlobalProfile Id="{EDB3036B-780D-487D-A375-69369D8A8F79}"/>
<Config>
<AutoLogonAccount rs5:DisplayName="Airport Kiosk"/>
<DefaultProfile Id="{EDB3036B-780D-487D-A375-69369D8A8F78}"/>
</Config>
</Configs>
</AssignedAccessConfiguration>
```
## Folder Access sample xml
Folder access is locked down so that when common file dialog is opened, IT Admin can specify if the user has access to the Downloads folder, or no access to any folder at all.