From d677e43483e70cbd19c2c974e363f5a4c8aa4a49 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Tue, 27 Feb 2024 13:54:38 -0500 Subject: [PATCH] Update FileExplorerNamespaceRestrictions in assigned-access-configuration-file.md --- .../assigned-access-configuration-file.md | 209 ++++++++---------- 1 file changed, 87 insertions(+), 122 deletions(-) diff --git a/windows/configuration/assigned-access/assigned-access-configuration-file.md b/windows/configuration/assigned-access/assigned-access-configuration-file.md index b00134b932..6df3a5bbcd 100644 --- a/windows/configuration/assigned-access/assigned-access-configuration-file.md +++ b/windows/configuration/assigned-access/assigned-access-configuration-file.md @@ -481,127 +481,6 @@ Group accounts are specified using ``. Nested groups aren't supported ::: zone-end -::: zone pivot="windows-10" - -### FileExplorerNamespaceRestrictions - -You can explicitly allow access to known folders when the user tries to open the file dialog box in a restricted user experience by including the `FileExplorerNamespaceRestrictions` node. - -The following example shows how to allow user access to the Downloads folder in the common file dialog box. - -> [!TIP] -> To grant access to the Downloads folder through File Explorer, add "Explorer.exe" to the list of allowed apps, and pin a file explorer shortcut to the kiosk start menu. - -```xml - - - - - - ... - - - - - - - ... - - - - - -``` - - -> [!NOTE] -> - `FileExplorerNamespaceRestrictions` and `AllowedNamespace:Downloads` are available in namespace `https://schemas.microsoft.com/AssignedAccess/201810/config`. -> - `AllowRemovableDrives` and `NoRestriction` are defined in a new namespace `https://schemas.microsoft.com/AssignedAccess/2020/config`. - -- When `FileExplorerNamespaceRestrictions` node isn't used, or used but left empty, the user won't be able to access any folder in a common dialog. For example, **Save As** in the Microsoft Edge browser. -- When Downloads is mentioned in allowed namespace, user will be able to access Downloads folder. -- When `AllowRemovableDrives` is used, user will be to access removable drives. -- When `NoRestriction` is used, no restriction will be applied to the dialog. -- `AllowRemovableDrives` and `AllowedNamespace:Downloads` can be used at the same time. - -:::row::: - :::column span="1"::: - **Scenario** - :::column-end::: - :::column span="3"::: - **Sample Xml** - :::column-end::: -:::row-end::: -:::row::: - :::column span="1"::: - **Block everything** - :::column-end::: - :::column span="3"::: - Either don't use the node or leave it empty - - ```xml - - - ``` - :::column-end::: -:::row-end::: -:::row::: - :::column span="1"::: - **Only allow downloads** - :::column-end::: - :::column span="3"::: - ```xml - - - - ``` - :::column-end::: -:::row-end::: - -:::row::: - :::column span="1"::: - **Only allow removable drives** - :::column-end::: - :::column span="3"::: - ```xml - - - - ``` - :::column-end::: -:::row-end::: - -:::row::: - :::column span="1"::: - **Allow both Downloads, and removable drives** - :::column-end::: - :::column span="3"::: - ```xml - - - - - ``` - :::column-end::: -:::row-end::: - -:::row::: - :::column span="1"::: - **No restrictions, all locations are allowed** - :::column-end::: - :::column span="3"::: - ```xml - - - - ``` - :::column-end::: -:::row-end::: - -::: zone-end