diff --git a/education/windows/set-up-school-pcs-technical.md b/education/windows/set-up-school-pcs-technical.md index 1f25de8042..5bf30b870c 100644 --- a/education/windows/set-up-school-pcs-technical.md +++ b/education/windows/set-up-school-pcs-technical.md @@ -104,7 +104,136 @@ The **Set up School PCs** app produces a specialized provisioning package that m > **Important**: It is not recommended to set additional policies on PCs configured with the **Set up School PCs** app. The shared PC mode has been optimized to be fast and reliable over time with minimal to no manual maintenance required - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

Policy name

Value

When set

Admin Templates > Control Panel > Personalization

Prevent enabling lock screen slide show

Enabled

Always

Do not display the lock screen

Enabled

Only on Windows 10 Pro for EDU, Enterprise, Enterprise for EDU

Always

Prevent changing lock screen and logon image

Enabled

Always

Admin Templates > System > Power Management > Button Settings

Select the Power button action (plugged in)

Sleep

SetPowerPolicies=True

Select the Power button action (on battery)

Sleep

SetPowerPolicies=True

Select the Sleep button action (plugged in)

Sleep

SetPowerPolicies=True

Select the lid switch action (plugged in)

Sleep

SetPowerPolicies=True

Select the lid switch action (on battery)

Sleep

SetPowerPolicies=True

Admin Templates > System > Power Management > Sleep Settings

Require a password when a computer wakes (plugged in)

Enabled

SignInOnResume = True

Require a password when a computer wakes (on battery)

Enabled

SignInOnResume = True

Specify the system sleep timeout (plugged in)

SleepTimeout

SetPowerPolicies=True

Specify the system sleep timeout (on battery)

SleepTimeout

SetPowerPolicies=True

Turn off hybrid sleep (plugged in)

Enabled

SetPowerPolicies=True

Turn off hybrid sleep (on battery)

Enabled

SetPowerPolicies=True

Specify the unattended sleep timeout (plugged in)

SleepTimeout

SetPowerPolicies=True

Specify the unattended sleep timeout (on battery)

SleepTimeout

SetPowerPolicies=True

Allow standby states (S1-S3) when sleeping (plugged in)

Enabled

SetPowerPolicies=True

Allow standby states (S1-S3) when sleeping (on battery)

Enabled

SetPowerPolicies=True

Specify the system hibernate timeout (plugged in)

Enabled, 0

SetPowerPolicies=True

Specify the system hibernate timeout (on battery)

Enabled, 0

SetPowerPolicies=True

Admin Templates > System > Power Management > Video and Display Settings

Turn off the display (plugged in)

SleepTimeout

SetPowerPolicies=True

Turn off the display (on battery

SleepTimeout

SetPowerPolicies=True

Admin Templates > System > Logon

Show first sign-in animation

Disabled

Always

Hide entry points for Fast User Switching

Enabled

Always

Turn on convenience PIN sign-in

Disabled

Always

Turn off picture password sign-in

Enabled

Always

Turn off app notification on the lock screen

Enabled

Always

Allow users to select when a password is required when resuming from connected standby

Disabled

SignInOnResume = True

Block user from showing account details on sign-in

Enabled

Always

Admin Templates > System > User Profiles

Turn off the advertising ID

Enabled

SetEduPolicies = True

Admin Templates > Windows Components

Do not show Windows Tips

Enabled

SetEduPolicies = True

Turn off Microsoft consumer experiences

Enabled

SetEduPolicies = True

Microsoft Passport for Work

Disabled

Always

Prevent the usage of OneDrive for file storage

Enabled

Always

Admin Templates > Windows Components > Biometrics

Allow the use of biometrics

Disabled

Always

Allow users to log on using biometrics

Disabled

Always

Allow domain users to log on using biometrics

Disabled

Always

Admin Templates > Windows Components > Data Collection and Preview Builds

Toggle user control over Insider builds

Disabled

Always

Disable pre-release features or settings

Disabled

Always

Do not show feedback notifications

Enabled

Always

Admin Templates > Windows Components > File Explorer

Show lock in the user tile menu

Disabled

Always

Admin Templates > Windows Components > Maintenance Scheduler

Automatic Maintenance Activation Boundary

MaintenanceStartTime

Always

Automatic Maintenance Random Delay

Enabled, 2 hours

Always

Automatic Maintenance WakeUp Policy

Enabled

Always

Admin Templates > Windows Components > Microsoft Edge

Open a new tab with an empty tab

Disabled

SetEduPolicies = True

Configure corporate home pages

Enabled, about:blank

SetEduPolicies = True

Admin Templates > Windows Components > Search

Allow Cortana

Disabled

SetEduPolicies = True

Windows Settings > Security Settings > Local Policies > Security Options

Interactive logon: Do not display last user name

- Enabled

- Disabled when account model is only guest

Always

Interactive logon: Sign-in last interactive user automatically after a system-initiated restart

Disabled

Always

Shutdown: Allow system to be shut down without having to log on

Disabled

Always

User Account Control: Behavior of the elevation prompt for standard users

Auto deny

Always


+ +## Related topics + +[Use Set up School PCs app](use-set-up-school-pcs-app.md) diff --git a/education/windows/set-up-students-pcs-to-join-domain.md b/education/windows/set-up-students-pcs-to-join-domain.md index a07a8cae33..3de5764c97 100644 --- a/education/windows/set-up-students-pcs-to-join-domain.md +++ b/education/windows/set-up-students-pcs-to-join-domain.md @@ -18,132 +18,7 @@ author: jdeckerMS - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Policy name

Value

When set

Admin Templates > Control Panel > Personalization

Prevent enabling lock screen slide show

Enabled

Always

Do not display the lock screen

Enabled

Only on Windows 10 Pro for EDU, Enterprise, Enterprise for EDU

Always

Prevent changing lock screen and logon image

Enabled

Always

Admin Templates > System > Power Management > Button Settings

Select the Power button action (plugged in)

Sleep

SetPowerPolicies=True

Select the Power button action (on battery)

Sleep

SetPowerPolicies=True

Select the Sleep button action (plugged in)

Sleep

SetPowerPolicies=True

Select the lid switch action (plugged in)

Sleep

SetPowerPolicies=True

Select the lid switch action (on battery)

Sleep

SetPowerPolicies=True

Admin Templates > System > Power Management > Sleep Settings

Require a password when a computer wakes (plugged in)

Enabled

SignInOnResume = True

Require a password when a computer wakes (on battery)

Enabled

SignInOnResume = True

Specify the system sleep timeout (plugged in)

SleepTimeout

SetPowerPolicies=True

Specify the system sleep timeout (on battery)

SleepTimeout

SetPowerPolicies=True

Turn off hybrid sleep (plugged in)

Enabled

SetPowerPolicies=True

Turn off hybrid sleep (on battery)

Enabled

SetPowerPolicies=True

Specify the unattended sleep timeout (plugged in)

SleepTimeout

SetPowerPolicies=True

Specify the unattended sleep timeout (on battery)

SleepTimeout

SetPowerPolicies=True

Allow standby states (S1-S3) when sleeping (plugged in)

Enabled

SetPowerPolicies=True

Allow standby states (S1-S3) when sleeping (on battery)

Enabled

SetPowerPolicies=True

Specify the system hibernate timeout (plugged in)

Enabled, 0

SetPowerPolicies=True

Specify the system hibernate timeout (on battery)

Enabled, 0

SetPowerPolicies=True

Admin Templates > System > Power Management > Video and Display Settings

Turn off the display (plugged in)

SleepTimeout

SetPowerPolicies=True

Turn off the display (on battery

SleepTimeout

SetPowerPolicies=True

Admin Templates > System > Logon

Show first sign-in animation

Disabled

Always

Hide entry points for Fast User Switching

Enabled

Always

Turn on convenience PIN sign-in

Disabled

Always

Turn off picture password sign-in

Enabled

Always

Turn off app notification on the lock screen

Enabled

Always

Allow users to select when a password is required when resuming from connected standby

Disabled

SignInOnResume = True

Block user from showing account details on sign-in

Enabled

Always

Admin Templates > System > User Profiles

Turn off the advertising ID

Enabled

SetEduPolicies = True

Admin Templates > Windows Components

Do not show Windows Tips

Enabled

SetEduPolicies = True

Turn off Microsoft consumer experiences

Enabled

SetEduPolicies = True

Microsoft Passport for Work

Disabled

Always

Prevent the usage of OneDrive for file storage

Enabled

Always

Admin Templates > Windows Components > Biometrics

Allow the use of biometrics

Disabled

Always

Allow users to log on using biometrics

Disabled

Always

Allow domain users to log on using biometrics

Disabled

Always

Admin Templates > Windows Components > Data Collection and Preview Builds

Toggle user control over Insider builds

Disabled

Always

Disable pre-release features or settings

Disabled

Always

Do not show feedback notifications

Enabled

Always

Admin Templates > Windows Components > File Explorer

Show lock in the user tile menu

Disabled

Always

Admin Templates > Windows Components > Maintenance Scheduler

Automatic Maintenance Activation Boundary

MaintenanceStartTime

Always

Automatic Maintenance Random Delay

Enabled, 2 hours

Always

Automatic Maintenance WakeUp Policy

Enabled

Always

Admin Templates > Windows Components > Microsoft Edge

Open a new tab with an empty tab

Disabled

SetEduPolicies = True

Configure corporate home pages

Enabled, about:blank

SetEduPolicies = True

Admin Templates > Windows Components > Search

Allow Cortana

Disabled

SetEduPolicies = True

Windows Settings > Security Settings > Local Policies > Security Options

Interactive logon: Do not display last user name

- Enabled

- Disabled when account model is only guest

Always

Interactive logon: Sign-in last interactive user automatically after a system-initiated restart

Disabled

Always

Shutdown: Allow system to be shut down without having to log on

Disabled

Always

User Account Control: Behavior of the elevation prompt for standard users

Auto deny

Always


+ text