Policy name | Value | When set |
+
|---|---|---|
Admin Templates > Control Panel > Personalization |
+||
Prevent enabling lock screen slide show | Enabled | Always |
+
Do not display the lock screen | Enabled Only on Windows 10 Pro for EDU, Enterprise, Enterprise for EDU | Always |
+
Prevent changing lock screen and logon image | Enabled | Always |
+
Admin Templates > System > Power Management > Button Settings |
+||
Select the Power button action (plugged in) | Sleep | SetPowerPolicies=True |
+
Select the Power button action (on battery) | Sleep | SetPowerPolicies=True |
+
Select the Sleep button action (plugged in) | Sleep | SetPowerPolicies=True |
+
Select the lid switch action (plugged in) | Sleep | SetPowerPolicies=True |
+
Select the lid switch action (on battery) | Sleep | SetPowerPolicies=True |
+
Admin Templates > System > Power Management > Sleep Settings |
+||
Require a password when a computer wakes (plugged in) | Enabled | SignInOnResume = True |
+
Require a password when a computer wakes (on battery) | Enabled | SignInOnResume = True |
+
Specify the system sleep timeout (plugged in) | SleepTimeout | SetPowerPolicies=True |
+
Specify the system sleep timeout (on battery) | SleepTimeout | SetPowerPolicies=True |
+
| Turn off hybrid sleep (plugged in) | Enabled | SetPowerPolicies=True |
+
| Turn off hybrid sleep (on battery) | Enabled | SetPowerPolicies=True |
+
| Specify the unattended sleep timeout (plugged in) | SleepTimeout | SetPowerPolicies=True |
| Specify the unattended sleep timeout (on battery) | SleepTimeout | SetPowerPolicies=True |
| Allow standby states (S1-S3) when sleeping (plugged in) | Enabled | SetPowerPolicies=True |
+
| Allow standby states (S1-S3) when sleeping (on battery) | Enabled | SetPowerPolicies=True |
+
| Specify the system hibernate timeout (plugged in) | Enabled, 0 | SetPowerPolicies=True |
+
| Specify the system hibernate timeout (on battery) | Enabled, 0 | SetPowerPolicies=True |
| Admin Templates > System > Power Management > Video and Display Settings | ||
| Turn off the display (plugged in) | SleepTimeout | SetPowerPolicies=True |
| Turn off the display (on battery | SleepTimeout | SetPowerPolicies=True |
+
| Admin Templates > System > Logon |
+||
| Show first sign-in animation | Disabled | Always |
+
| Hide entry points for Fast User Switching | Enabled | Always |
| Turn on convenience PIN sign-in | Disabled | Always |
+
| Turn off picture password sign-in | Enabled | Always |
+
| Turn off app notification on the lock screen | Enabled | Always |
+
| Allow users to select when a password is required when resuming from connected standby | Disabled | SignInOnResume = True |
+
| Block user from showing account details on sign-in | Enabled | Always |
+
| Admin Templates > System > User Profiles |
+||
| Turn off the advertising ID | Enabled | SetEduPolicies = True |
+
| Admin Templates > Windows Components |
+||
| Do not show Windows Tips | Enabled | SetEduPolicies = True |
+
| Turn off Microsoft consumer experiences | Enabled | SetEduPolicies = True |
+
| Microsoft Passport for Work | Disabled | Always |
+
| Prevent the usage of OneDrive for file storage | Enabled | Always |
+
| Admin Templates > Windows Components > Biometrics |
+||
| Allow the use of biometrics | Disabled | Always |
+
| Allow users to log on using biometrics | Disabled | Always |
+
| Allow domain users to log on using biometrics | Disabled | Always |
+
| Admin Templates > Windows Components > Data Collection and Preview Builds |
+||
| Toggle user control over Insider builds | Disabled | Always |
+
| Disable pre-release features or settings | Disabled | Always |
+
| Do not show feedback notifications | Enabled | Always |
+
| Admin Templates > Windows Components > File Explorer |
+||
| Show lock in the user tile menu | Disabled | Always |
+
| Admin Templates > Windows Components > Maintenance Scheduler |
+||
| Automatic Maintenance Activation Boundary | MaintenanceStartTime | Always |
+
| Automatic Maintenance Random Delay | Enabled, 2 hours | Always |
+
| Automatic Maintenance WakeUp Policy | Enabled | Always |
+
| Admin Templates > Windows Components > Microsoft Edge |
+||
| Open a new tab with an empty tab | Disabled | SetEduPolicies = True |
+
| Configure corporate home pages | Enabled, about:blank | SetEduPolicies = True |
+
| Admin Templates > Windows Components > Search |
+||
| Allow Cortana | Disabled | SetEduPolicies = True |
+
| Windows Settings > Security Settings > Local Policies > Security Options |
+||
| Interactive logon: Do not display last user name | - Enabled - Disabled when account model is only guest | Always |
+
| Interactive logon: Sign-in last interactive user automatically after a system-initiated restart | Disabled | Always |
+
| Shutdown: Allow system to be shut down without having to log on | Disabled | Always |
+
| User Account Control: Behavior of the elevation prompt for standard users | Auto deny | Always |