diff --git a/windows/client-management/mdm/policy-csp-search.md b/windows/client-management/mdm/policy-csp-search.md index e6872c41dc..c3bd4ef159 100644 --- a/windows/client-management/mdm/policy-csp-search.md +++ b/windows/client-management/mdm/policy-csp-search.md @@ -1,856 +1,1091 @@ --- -title: Policy CSP - Search -description: Learn how the Policy CSP - Search setting allows search and Cortana to search cloud sources like OneDrive and SharePoint. +title: Search Policy CSP +description: Learn more about the Search Area in Policy CSP +author: vinaypamnani-msft +manager: aaroncz ms.author: vinpa -ms.topic: article +ms.date: 12/19/2022 +ms.localizationpriority: medium ms.prod: windows-client ms.technology: itpro-manage -author: vinaypamnani-msft -ms.localizationpriority: medium -ms.date: 02/12/2021 -ms.reviewer: -manager: aaroncz +ms.topic: reference --- + + + # Policy CSP - Search - -
- - -## Search policies - -
-
- Search/AllowCloudSearch -
-
- Search/AllowCortanaInAAD -
-
- Search/AllowFindMyFiles -
-
- Search/AllowIndexingEncryptedStoresOrItems -
-
- Search/AllowSearchToUseLocation -
-
- Search/AllowSearchHighlights -
-
- Search/AllowStoringImagesFromVisionSearch -
-
- Search/AllowUsingDiacritics -
-
- Search/AllowWindowsIndexer -
-
- Search/AlwaysUseAutoLangDetection -
-
- Search/DisableBackoff -
-
- Search/DisableRemovableDriveIndexing -
-
- Search/DisableSearch -
-
- Search/DoNotUseWebResults -
-
- Search/PreventIndexingLowDiskSpaceMB -
-
- Search/PreventRemoteQueries -
-
- - -
- - -**Search/AllowCloudSearch** - - - -|Edition|Windows 10|Windows 11| -|--- |--- |--- | -|Home|No|No| -|Pro|Yes|Yes| -|Windows SE|No|Yes| -|Business|Yes|Yes| -|Enterprise|Yes|Yes| -|Education|Yes|Yes| - - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Allow Search and Cortana to search cloud sources like OneDrive and SharePoint. This policy allows corporate administrators to control whether employees can turn off/on the search of these cloud sources. The default policy value is to allow employees access to the setting that controls search of cloud sources. - - - -ADMX Info: -- GP Friendly name: *Allow Cloud Search* -- GP name: *AllowCloudSearch* -- GP element: *AllowCloudSearch_Dropdown* -- GP path: *Windows Components/Search* -- GP ADMX file name: *Search.admx* - - - -The following list shows the supported values: - -- 0 – Not allowed. -- 1 (default) – Allowed. - - - - -
- - -**Search/AllowCortanaInAAD** - - - -|Edition|Windows 10|Windows 11| -|--- |--- |--- | -|Home|No|No| -|Pro|Yes|Yes| -|Windows SE|No|Yes| -|Business|Yes|Yes| -|Enterprise|Yes|Yes| -|Education|Yes|Yes| - - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -This policy allows the cortana opt-in page during windows setup out of the box experience. - - - -ADMX Info: -- GP Friendly name: *Allow Cloud Search* -- GP name: *AllowCortanaInAAD* -- GP element: *AllowCloudSearch_Dropdown* -- GP path: *Windows Components/Search* -- GP ADMX file name: *Search.admx* - - - - -This value is a simple boolean value, default false, that can be set by MDM policy to allow the Cortana Page in OOBE when logged in with an Azure Active Directory account. - - - - - -
- - -**Search/AllowFindMyFiles** - - - -|Edition|Windows 10|Windows 11| -|--- |--- |--- | -|Home|No|No| -|Pro|Yes|Yes| -|Windows SE|No|Yes| -|Business|Yes|Yes| -|Enterprise|Yes|Yes| -|Education|Yes|Yes| - - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Controls if the user can configure search to Find My Files mode, which searches files in secondary hard drives and also outside of the user profile. Find My Files doesn't allow users to search files or locations to which they don't have access. - - - -ADMX Info: -- GP Friendly name: *Allow Find My Files* -- GP name: *AllowFindMyFiles* -- GP path: *Computer Configuration/Administrative Templates/Windows Components/Search* -- GP ADMX file name: *Search.admx* - - - -The following list shows the supported values: - -- 1 (Default) - Find My Files feature can be toggled (still off by default), and the settings UI is present. -- 0 - Find My Files feature is turned off completely, and the settings UI is disabled. - - - - - - - - - - -
- - -**Search/AllowIndexingEncryptedStoresOrItems** - - - -|Edition|Windows 10|Windows 11| -|--- |--- |--- | -|Home|No|No| -|Pro|Yes|Yes| -|Windows SE|No|Yes| -|Business|Yes|Yes| -|Enterprise|Yes|Yes| -|Education|Yes|Yes| - - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Allows or disallows the indexing of items. This switch is for the Windows Search Indexer, which controls whether it will index items that are encrypted, such as the Windows Information Protection (WIP) protected files. - -When the policy is enabled, WIP protected items are indexed and the metadata about them are stored in an unencrypted location. The metadata includes file path and date modified. - -When the policy is disabled, the WIP protected items aren't indexed and don't show up in the results in Cortana or file explorer. There may also be a performance impact on photos and Groove apps, if there are many WIP-protected media files on the device. - -Most restricted value is 0. - - - -ADMX Info: -- GP Friendly name: *Allow indexing of encrypted files* -- GP name: *AllowIndexingEncryptedStoresOrItems* -- GP path: *Windows Components/Search* -- GP ADMX file name: *Search.admx* - - - -The following list shows the supported values: - -- 0 – Not allowed. -- 1 (default) – Allowed. - - - - -
- - -**Search/AllowSearchToUseLocation** - - - -|Edition|Windows 10|Windows 11| -|--- |--- |--- | -|Home|No|No| -|Pro|Yes|Yes| -|Windows SE|No|Yes| -|Business|Yes|Yes| -|Enterprise|Yes|Yes| -|Education|Yes|Yes| - - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -Specifies whether search can use location information. - -Most restricted value is 0. - - - -ADMX Info: -- GP Friendly name: *Allow search and Cortana to use location* -- GP name: *AllowSearchToUseLocation* -- GP path: *Windows Components/Search* -- GP ADMX file name: *Search.admx* - - - -The following list shows the supported values: - -- 0 – Not allowed. -- 1 (default) – Allowed. - - - - -
- - -**Search/AllowSearchHighlights** - - - -|Edition|Windows 10|Windows 11| -|--- |--- |--- | -|Home|No|No| -|Pro|Yes|Yes| -|Windows SE|No|Yes| -|Business|Yes|Yes| -|Enterprise|Yes|Yes| -|Education|Yes|Yes| - - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -This policy controls whether search highlights are shown in the search box or in search home. - -- If you enable this policy setting, then this setting turns on search highlights in the search box or in the search home. -- If you disable this policy setting, then this setting turns off search highlights in the search box or in the search home. - - - -ADMX Info: -- GP Friendly name: *Allow search and highlights* -- GP name: *AllowSearchHighlights* -- GP path: *Windows Components/Search* -- GP ADMX file name: *Search.admx* - - - -The following list shows the supported values in Windows 10: - -- 1 (default) - Enabling or not configuring this setting turns on search highlights in the taskbar search box and in search home. -- 0 - Disabling this setting turns off search highlights in the taskbar search box and in search home. - -The following list shows the supported values in Windows 11: - -- 1 (default) - Enabling or not configuring this setting turns on search highlights in the start menu search box and in search home. -- 0 - Disabling this setting turns off search highlights in the start menu search box and in search home. - - - - -
- - -**Search/AllowStoringImagesFromVisionSearch** - - + + + + + +## AllowCloudSearch + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1709 [10.0.16299] and later | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/Search/AllowCloudSearch +``` + + + + +Allow search and Cortana to search cloud sources like OneDrive and SharePoint. This policy allows corporate administrators to control whether employees can turn off/on the search of these cloud sources. The default policy value is to allow employees access to the setting that controls search of cloud sources. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | int | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 1 | + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| 0 | Not allowed. | +| 1 (Default) | Allowed. | + + + +**Group policy mapping**: + +| Name | Value | +|:--|:--| +| Name | AllowCloudSearch | +| Friendly Name | Allow Cloud Search | +| Element Name | Cloud Search Setting | +| Location | Computer Configuration | +| Path | Windows Components > Search | +| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\Windows Search | +| ADMX File Name | Search.admx | + + + + + + + + + +## AllowCortanaInAAD + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/Search/AllowCortanaInAAD +``` + + + + +Allow the cortana opt-in page during windows setup out of the box experience + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | int | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 0 | + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| 0 (Default) | Not allowed. The Cortana consent page will not appear in AAD OOBE during setup. | +| 1 | Allowed. The Cortana consent page will appear in Azure AAD OOBE during setup. | + + + +**Group policy mapping**: + +| Name | Value | +|:--|:--| +| Name | AllowCortanaInAAD | +| Friendly Name | Allow Cortana Page in OOBE on an AAD account | +| Location | Computer Configuration | +| Path | Windows Components > Search | +| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\Windows Search | +| Registry Value Name | AllowCortanaInAAD | +| ADMX File Name | Search.admx | + + + + + + + + + +## AllowFindMyFiles + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1903 [10.0.18362] and later | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/Search/AllowFindMyFiles +``` + + + + +This feature allows you to disable find my files completely on the machine + + + + + +This policy controls whether the user can configure search to *Find My Files* mode. This mode searches files in secondary hard drives and also outside of the user profile. Find My Files doesn't allow users to search files or locations to which they don't have access. + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | int | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 1 | + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| 1 (Default) | Find My Files feature can be toggled (still off by default), and the settings UI is present. | +| 0 | Find My Files feature is turned off completely, and the settings UI is disabled. | + + + +**Group policy mapping**: + +| Name | Value | +|:--|:--| +| Name | AllowFindMyFiles | +| Path | Search > AT > WindowsComponents > Search | + + + + + + + + + +## AllowIndexingEncryptedStoresOrItems + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1607 [10.0.14393] and later | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/Search/AllowIndexingEncryptedStoresOrItems +``` + + + + +This policy setting allows encrypted items to be indexed. If you enable this policy setting, indexing will attempt to decrypt and index the content (access restrictions will still apply). If you disable this policy setting, the search service components (including non-Microsoft components) are expected not to index encrypted items or encrypted stores. This policy setting is not configured by default. If you do not configure this policy setting, the local setting, configured through Control Panel, will be used. By default, the Control Panel setting is set to not index encrypted content. + +When this setting is enabled or disabled, the index is rebuilt completely. + +Full volume encryption (such as BitLocker Drive Encryption or a non-Microsoft solution) must be used for the location of the index to maintain security for encrypted files. + + + + + +When the policy is enabled, Windows Information Protection (WIP) protected items are indexed. The metadata about them are stored in an unencrypted location. The metadata includes file path and date modified. + +When the policy is disabled, the WIP protected items aren't indexed. The encrypted items don't show up in the results in Cortana or file explorer. Search performance may also be affected on photos and other media apps, if there are many WIP-protected media files on the device. + +The most restrictive value is `0` to not allow indexing of encrypted items. + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | int | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 0 | + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| 0 (Default) | Not allowed. | +| 1 | Allowed. | + + + +**Group policy mapping**: + +| Name | Value | +|:--|:--| +| Name | AllowIndexingEncryptedStoresOrItems | +| Friendly Name | Allow indexing of encrypted files | +| Location | Computer Configuration | +| Path | Windows Components > Search | +| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\Windows Search | +| Registry Value Name | AllowIndexingEncryptedStoresOrItems | +| ADMX File Name | Search.admx | + + + + + + + + + +## AllowSearchHighlights + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/Search/AllowSearchHighlights +``` + + + + +Disabling this setting turns off search highlights in the start menu search box and in search home. Enabling or not configuring this setting turns on search highlights in the start menu search box and in search home. + + + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| 0 | Disabling this setting turns off search highlights in search home, and the taskbar search box (Windows 10) or the Start menu search box (Windows 11). | +| 1 (Default) | Enabling or not configuring this setting turns on search highlights in search home, and the taskbar search box (Windows 10) or the Start menu search box (Windows 11). | + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | int | +| Access Type | Add, Delete, Get, Replace | +| Allowed Values | Range: `[0-1]` | +| Default Value | 1 | + + + +**Group policy mapping**: + +| Name | Value | +|:--|:--| +| Name | AllowSearchHighlights | +| Friendly Name | Allow search highlights | +| Location | Computer Configuration | +| Path | Windows Components > Search | +| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\Windows Search | +| Registry Value Name | EnableDynamicContentInWSB | +| ADMX File Name | Search.admx | + + + + + + + + + +## AllowSearchToUseLocation + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1507 [10.0.10240] and later | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/Search/AllowSearchToUseLocation +``` + + + + +This policy setting specifies whether search and Cortana can provide location aware search and Cortana results. + +If this is enabled, search and Cortana can access location information. + + + + + +The most restrictive value is `0` to not allow search to use location. + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | int | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 1 | + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| 0 | Not allowed. | +| 1 (Default) | Allowed. | + + + +**Group policy mapping**: + +| Name | Value | +|:--|:--| +| Name | AllowSearchToUseLocation | +| Friendly Name | Allow search and Cortana to use location | +| Location | Computer Configuration | +| Path | Windows Components > Search | +| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\Windows Search | +| Registry Value Name | AllowSearchToUseLocation | +| ADMX File Name | Search.admx | + + + + + + + + + +## AllowStoringImagesFromVisionSearch + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1507 [10.0.10240] and later | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/Search/AllowStoringImagesFromVisionSearch +``` + + + + This policy has been deprecated. + - - + + + -
+ +**Description framework properties**: - -**Search/AllowUsingDiacritics** +| Property name | Property value | +|:--|:--| +| Format | int | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 1 | + - + +**Allowed values**: -|Edition|Windows 10|Windows 11| -|--- |--- |--- | -|Home|No|No| -|Pro|Yes|Yes| -|Windows SE|No|Yes| -|Business|Yes|Yes| -|Enterprise|Yes|Yes| -|Education|Yes|Yes| +| Value | Description | +|:--|:--| +| 0 | Not allowed. | +| 1 (Default) | Allowed. | + - -
+ + + - -[Scope](./policy-configuration-service-provider.md#policy-scope): + -> [!div class = "checklist"] -> * Device + +## AllowUsingDiacritics -
+ +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1607 [10.0.14393] and later | + - - -Allows the use of diacritics. + +```Device +./Device/Vendor/MSFT/Policy/Config/Search/AllowUsingDiacritics +``` + -Most restricted value is 0. + + +This policy setting allows words that contain diacritic characters to be treated as separate words. If you enable this policy setting, words that only differ in diacritics are treated as different words. If you disable this policy setting, words with diacritics and words without diacritics are treated as identical words. This policy setting is not configured by default. If you do not configure this policy setting, the local setting, configured through Control Panel, will be used. - - -ADMX Info: -- GP Friendly name: *Allow use of diacritics* -- GP name: *AllowUsingDiacritics* -- GP path: *Windows Components/Search* -- GP ADMX file name: *Search.admx* +**Note**: By default, the Control Panel setting is set to treat words that differ only because of diacritics as the same word. + - - -The following list shows the supported values: + + -- 0 – Not allowed. -- 1 (default) – Allowed. +The most restrictive value is `0` to not allow the use of diacritics. - - + -
+ +**Description framework properties**: - -**Search/AllowWindowsIndexer** +| Property name | Property value | +|:--|:--| +| Format | int | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 0 | + - + +**Allowed values**: -|Edition|Windows 10|Windows 11| -|--- |--- |--- | -|Home|No|No| -|Pro|Yes|Yes| -|Windows SE|No|Yes| -|Business|Yes|Yes| -|Enterprise|Yes|Yes| -|Education|Yes|Yes| +| Value | Description | +|:--|:--| +| 0 (Default) | Not allowed. | +| 1 | Allowed. | + - -
+ +**Group policy mapping**: - -[Scope](./policy-configuration-service-provider.md#policy-scope): +| Name | Value | +|:--|:--| +| Name | AllowUsingDiacritics | +| Friendly Name | Allow use of diacritics | +| Location | Computer Configuration | +| Path | Windows Components > Search | +| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\Windows Search | +| Registry Value Name | AllowUsingDiacritics | +| ADMX File Name | Search.admx | + -> [!div class = "checklist"] -> * Device + + + -
+ - - -Allow Windows indexer. Supported value type is integer. + +## AllowWindowsIndexer - - + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1507 [10.0.10240] and later | + -
+ +```Device +./Device/Vendor/MSFT/Policy/Config/Search/AllowWindowsIndexer +``` + - -**Search/AlwaysUseAutoLangDetection** + + +Allow Windows indexer. Value type is integer. + - + + + -|Edition|Windows 10|Windows 11| -|--- |--- |--- | -|Home|No|No| -|Pro|Yes|Yes| -|Windows SE|No|Yes| -|Business|Yes|Yes| -|Enterprise|Yes|Yes| -|Education|Yes|Yes| + +**Description framework properties**: - -
+| Property name | Property value | +|:--|:--| +| Format | int | +| Access Type | Add, Delete, Get, Replace | +| Allowed Values | Range: `[0-3]` | +| Default Value | 3 | + - -[Scope](./policy-configuration-service-provider.md#policy-scope): + + + -> [!div class = "checklist"] -> * Device + -
+ +## AlwaysUseAutoLangDetection - - -Specifies whether to always use automatic language detection when indexing content and properties. + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1607 [10.0.14393] and later | + -Most restricted value is 0. + +```Device +./Device/Vendor/MSFT/Policy/Config/Search/AlwaysUseAutoLangDetection +``` + - - -ADMX Info: -- GP Friendly name: *Always use automatic language detection when indexing content and properties* -- GP name: *AlwaysUseAutoLangDetection* -- GP path: *Windows Components/Search* -- GP ADMX file name: *Search.admx* + + +This policy setting determines when Windows uses automatic language detection results, and when it relies on indexing history. If you enable this policy setting, Windows will always use automatic language detection to index (as it did in Windows 7). Using automatic language detection can increase memory usage. We recommend enabling this policy setting only on PCs where documents are stored in many languages. If you disable or do not configure this policy setting, Windows will use automatic language detection only when it can determine the language of a document with high confidence. + - - -The following list shows the supported values: + + -- 0 – Not allowed. -- 1 (default) – Allowed. +The most restrictive value is `0` to now allow automatic language detection. - - + -
+ +**Description framework properties**: - -**Search/DisableBackoff** +| Property name | Property value | +|:--|:--| +| Format | int | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 0 | + - + +**Allowed values**: -|Edition|Windows 10|Windows 11| -|--- |--- |--- | -|Home|No|No| -|Pro|Yes|Yes| -|Windows SE|No|Yes| -|Business|Yes|Yes| -|Enterprise|Yes|Yes| -|Education|Yes|Yes| +| Value | Description | +|:--|:--| +| 0 (Default) | Not allowed. | +| 1 | Allowed. | + - -
+ +**Group policy mapping**: - -[Scope](./policy-configuration-service-provider.md#policy-scope): +| Name | Value | +|:--|:--| +| Name | AlwaysUseAutoLangDetection | +| Friendly Name | Always use automatic language detection when indexing content and properties | +| Location | Computer Configuration | +| Path | Windows Components > Search | +| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\Windows Search | +| Registry Value Name | AlwaysUseAutoLangDetection | +| ADMX File Name | Search.admx | + -> [!div class = "checklist"] -> * Device + + + -
+ - - + +## DisableBackoff + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1607 [10.0.14393] and later | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/Search/DisableBackoff +``` + + + + If enabled, the search indexer backoff feature will be disabled. Indexing will continue at full speed even when system activity is high. If disabled, backoff logic will be used to throttle back indexing activity when system activity is high. Default is disabled. + - - -ADMX Info: -- GP Friendly name: *Disable indexer backoff* -- GP name: *DisableBackoff* -- GP path: *Windows Components/Search* -- GP ADMX file name: *Search.admx* + + + - - -The following list shows the supported values: + +**Description framework properties**: -- 0 (default) – Disable. -- 1 – Enable. +| Property name | Property value | +|:--|:--| +| Format | int | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 0 | + - - + +**Allowed values**: -
+| Value | Description | +|:--|:--| +| 0 (Default) | Disable. | +| 1 | Enable. | + - -**Search/DisableRemovableDriveIndexing** + +**Group policy mapping**: - +| Name | Value | +|:--|:--| +| Name | DisableBackoff | +| Friendly Name | Disable indexer backoff | +| Location | Computer Configuration | +| Path | Windows Components > Search | +| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\Windows Search | +| Registry Value Name | DisableBackoff | +| ADMX File Name | Search.admx | + -|Edition|Windows 10|Windows 11| -|--- |--- |--- | -|Home|No|No| -|Pro|Yes|Yes| -|Windows SE|No|Yes| -|Business|Yes|Yes| -|Enterprise|Yes|Yes| -|Education|Yes|Yes| + + + - -
+ - -[Scope](./policy-configuration-service-provider.md#policy-scope): + +## DisableRemovableDriveIndexing -> [!div class = "checklist"] -> * Device + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1607 [10.0.14393] and later | + -
+ +```Device +./Device/Vendor/MSFT/Policy/Config/Search/DisableRemovableDriveIndexing +``` + - - + + This policy setting configures whether or not locations on removable drives can be added to libraries. -If you enable this policy setting, locations on removable drives can't be added to libraries. In addition, locations on removable drives can't be indexed. +If you enable this policy setting, locations on removable drives cannot be added to libraries. In addition, locations on removable drives cannot be indexed. -If you disable or don't configure this policy setting, locations on removable drives can be added to libraries. In addition, locations on removable drives can be indexed. +If you disable or do not configure this policy setting, locations on removable drives can be added to libraries. In addition, locations on removable drives can be indexed. + - - -ADMX Info: -- GP Friendly name: *Do not allow locations on removable drives to be added to libraries* -- GP name: *DisableRemovableDriveIndexing* -- GP path: *Windows Components/Search* -- GP ADMX file name: *Search.admx* + + + - - -The following list shows the supported values: + +**Description framework properties**: -- 0 (default) – Disable. -- 1 – Enable. +| Property name | Property value | +|:--|:--| +| Format | int | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 0 | + - - + +**Allowed values**: -
+| Value | Description | +|:--|:--| +| 0 (Default) | Disable. | +| 1 | Enable. | + - -**Search/DisableSearch** + +**Group policy mapping**: - +| Name | Value | +|:--|:--| +| Name | DisableRemovableDriveIndexing | +| Friendly Name | Do not allow locations on removable drives to be added to libraries | +| Location | Computer Configuration | +| Path | Windows Components > Search | +| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\Windows Search | +| Registry Value Name | DisableRemovableDriveIndexing | +| ADMX File Name | Search.admx | + -|Edition|Windows 10|Windows 11| -|--- |--- |--- | -|Home|No|No| -|Pro|No|Yes| -|Windows SE|No|Yes| -|Business|No|Yes| -|Enterprise|No|Yes| -|Education|No|Yes| + + + - -
+ - -[Scope](./policy-configuration-service-provider.md#policy-scope): + +## DisableSearch -> [!div class = "checklist"] -> * Device -
+ +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 22H2 [10.0.22621] and later | + - - -This policy setting completely disables Search UI and all its entry points such as keyboard shortcuts and touch-pad gestures. + +```Device +./Device/Vendor/MSFT/Policy/Config/Search/DisableSearch +``` + -It removes the Search button from the Taskbar and the corresponding option in the Settings. It also disables type-to-search in the Start menu and removes the Start menu's search box. + + +If you enable this policy, the Search UI will be disabled along with all its entry points, such as keyboard shortcuts, touchpad gestures, and type-to-search in the Start menu. The Start menu's search box and Search Taskbar button will also be hidden. - - -ADMX Info: +If you disable or don't configure this policy setting, the user will be able to open the Search UI and its different entry points will be shown. + -- GP Friendly name: *Fully disable Search UI* -- GP name: *DisableSearch* -- GP path: *Windows Components/Search* -- GP ADMX file name: *Search.admx* + + + - - -The following list shows the supported values: + +**Description framework properties**: -- 0 (default) – Do not disable search. -- 1 – Disable search. +| Property name | Property value | +|:--|:--| +| Format | int | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 0 | + - - + +**Allowed values**: -
+| Value | Description | +|:--|:--| +| 0 (Default) | Do not disable. | +| 1 | Disable. | + - -**Search/DoNotUseWebResults** + +**Group policy mapping**: - +| Name | Value | +|:--|:--| +| Name | DisableSearch | +| Friendly Name | Fully disable Search UI | +| Location | Computer Configuration | +| Path | Windows Components > Search | +| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\Windows Search | +| Registry Value Name | DisableSearch | +| ADMX File Name | Search.admx | + -|Edition|Windows 10|Windows 11| -|--- |--- |--- | -|Home|No|No| -|Pro|Yes|Yes| -|Windows SE|No|Yes| -|Business|Yes|Yes| -|Enterprise|Yes|Yes| -|Education|Yes|Yes| + + + - -
+ - -[Scope](./policy-configuration-service-provider.md#policy-scope): + +## DoNotUseWebResults -> [!div class = "checklist"] -> * Device + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later | + -
+ +```Device +./Device/Vendor/MSFT/Policy/Config/Search/DoNotUseWebResults +``` + - - -Don't search the web or display web results in Search, or show search highlights in the search box or in search home. + + +This policy setting allows you to control whether or not Search can perform queries on the web, and if the web results are displayed in Search. -This policy setting allows you to control whether or not Search can perform queries on the web, if web results are displayed in Search, and if search highlights are shown in the search box and in search home. +If you enable this policy setting, queries won't be performed on the web and web results won't be displayed when a user performs a query in Search. -- If you enable this policy setting, queries won't be performed on the web. Web results won't be displayed when a user performs a query in Search, and search highlights won't be shown in the search box and in search home. +If you disable this policy setting, queries will be performed on the web and web results will be displayed when a user performs a query in Search. -- If you disable this policy setting, queries will be performed on the web. Web results will be displayed when a user performs a query in Search, and search highlights will be shown in the search box and in search home. +If you don't configure this policy setting, a user can choose whether or not Search can perform queries on the web, and if the web results are displayed in Search. + - - -ADMX Info: -- GP Friendly name: *Don't search the web or display web results in Search* -- GP name: *DoNotUseWebResults* -- GP path: *Windows Components/Search* -- GP ADMX file name: *Search.admx* + + + - - -The following list shows the supported values: + +**Description framework properties**: -- 0 - Not allowed. Queries won't be performed on the web. Web results won't be displayed when a user performs a query in Search, and search highlights won't be shown in the search box and in search home. -- 1 (default) - Allowed. Queries will be performed on the web. Web results will be displayed when a user performs a query in Search, and search highlights will be shown in the search box and in search home. +| Property name | Property value | +|:--|:--| +| Format | int | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 1 | + - - + +**Allowed values**: -
+| Value | Description | +|:--|:--| +| 0 | Not allowed. Queries won't be performed on the web and web results won't be displayed when a user performs a query in Search. | +| 1 (Default) | Allowed. Queries will be performed on the web and web results will be displayed when a user performs a query in Search. | + - -**Search/PreventIndexingLowDiskSpaceMB** + +**Group policy mapping**: - +| Name | Value | +|:--|:--| +| Name | DoNotUseWebResults | +| Friendly Name | Don't search the web or display web results in Search | +| Location | Computer Configuration | +| Path | Windows Components > Search | +| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\Windows Search | +| Registry Value Name | ConnectedSearchUseWeb | +| ADMX File Name | Search.admx | + -|Edition|Windows 10|Windows 11| -|--- |--- |--- | -|Home|No|No| -|Pro|Yes|Yes| -|Windows SE|No|Yes| -|Business|Yes|Yes| -|Enterprise|Yes|Yes| -|Education|Yes|Yes| + + + - -
+ - -[Scope](./policy-configuration-service-provider.md#policy-scope): + +## PreventIndexingLowDiskSpaceMB -> [!div class = "checklist"] -> * Device + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1607 [10.0.14393] and later | + -
+ +```Device +./Device/Vendor/MSFT/Policy/Config/Search/PreventIndexingLowDiskSpaceMB +``` + - - -Enabling this policy prevents indexing from continuing after less than the specified amount of hard drive space is left on the same drive as the index location. Select between 0 and 1. + + +Enabling this policy prevents indexing from continuing after less than the specified amount of hard drive space is left on the same drive as the index location. Select between 0 and 2147483647 MB. -Enable this policy, if computers in your environment have limited hard drive space. +Enable this policy if computers in your environment have extremely limited hard drive space. When this policy is disabled or not configured, Windows Desktop Search automatically manages your index size. + - - -ADMX Info: -- GP Friendly name: *Stop indexing in the event of limited hard drive space* -- GP name: *StopIndexingOnLimitedHardDriveSpace* -- GP path: *Windows Components/Search* -- GP ADMX file name: *Search.admx* + + + - - -The following list shows the supported values: + +**Description framework properties**: -- 0 – Disable. -- 1 (default) – Enable. +| Property name | Property value | +|:--|:--| +| Format | int | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 1 | + - - + +**Allowed values**: -
+| Value | Description | +|:--|:--| +| 0 | Disable. | +| 1 (Default) | Enable. | + - -**Search/PreventRemoteQueries** + +**Group policy mapping**: - +| Name | Value | +|:--|:--| +| Name | StopIndexingOnLimitedHardDriveSpace | +| Friendly Name | Stop indexing in the event of limited hard drive space | +| Location | Computer Configuration | +| Path | Windows Components > Search | +| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\Windows Search | +| ADMX File Name | Search.admx | + -|Edition|Windows 10|Windows 11| -|--- |--- |--- | -|Home|No|No| -|Pro|Yes|Yes| -|Windows SE|No|Yes| -|Business|Yes|Yes| -|Enterprise|Yes|Yes| -|Education|Yes|Yes| + + + - -
+ - -[Scope](./policy-configuration-service-provider.md#policy-scope): + +## PreventRemoteQueries -> [!div class = "checklist"] -> * Device + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :heavy_check_mark: Device
:x: User | :x: Home
:heavy_check_mark: Pro
:heavy_check_mark: Enterprise
:heavy_check_mark: Education
:heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1607 [10.0.14393] and later | + -
+ +```Device +./Device/Vendor/MSFT/Policy/Config/Search/PreventRemoteQueries +``` + - - -If enabled, clients will be unable to query this computer's index remotely. Thus, when they're browsing network shares that are stored on this computer, they won't search them using the index. If disabled, client search requests will use this computer's index. + + +If enabled, clients will be unable to query this computer's index remotely. Thus, when they are browsing network shares that are stored on this computer, they will not search them using the index. If disabled, client search requests will use this computer's index. Default is disabled. + - - -ADMX Info: -- GP Friendly name: *Prevent clients from querying the index remotely* -- GP name: *PreventRemoteQueries* -- GP path: *Windows Components/Search* -- GP ADMX file name: *Search.admx* + + + - - -The following list shows the supported values: + +**Description framework properties**: -- 0 – Disable. -- 1 (default) – Enable. +| Property name | Property value | +|:--|:--| +| Format | int | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 1 | + - - + +**Allowed values**: -
+| Value | Description | +|:--|:--| +| 0 | Disable. | +| 1 (Default) | Enable. | + + +**Group policy mapping**: - +| Name | Value | +|:--|:--| +| Name | PreventRemoteQueries | +| Friendly Name | Prevent clients from querying the index remotely | +| Location | Computer Configuration | +| Path | Windows Components > Search | +| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\Windows Search | +| Registry Value Name | PreventRemoteQueries | +| ADMX File Name | Search.admx | + -## Related topics + + + -[Policy configuration service provider](policy-configuration-service-provider.md) \ No newline at end of file + + + +## SafeSearchPermissions + +> [!NOTE] +> This policy is deprecated and may be removed in a future release. + + +| Scope | Editions | Applicable OS | +|:--|:--|:--| +| :heavy_check_mark: Device
:x: User | :x: Home
:x: Pro
:x: Enterprise
:x: Education
:x: Windows SE | :heavy_check_mark: Windows 10, version 1607 [10.0.14393] and later | + + + +```Device +./Device/Vendor/MSFT/Policy/Config/Search/SafeSearchPermissions +``` + + + + +This policy is deprecated. + + + + + + + +**Description framework properties**: + +| Property name | Property value | +|:--|:--| +| Format | int | +| Access Type | Add, Delete, Get, Replace | +| Default Value | 1 | + + + +**Allowed values**: + +| Value | Description | +|:--|:--| +| 1 (Default) | Enable | +| 0 | Disable | + + + + + + + + + + + + + + +## Related articles + +[Policy configuration service provider](policy-configuration-service-provider.md)