deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 05:17:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Updated

Browse Source
This commit is contained in:
nimishasatapathy 2021-08-11 14:02:14 +05:30
parent 6aa19d41cc
commit f14f6cad56
32 changed files with 487 additions and 487 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
windows/client-management/mdm/policy-csp-datausage.md
View File

@ -112,7 +112,7 @@ If this policy setting is disabled or is not configured, the cost of 4G connecti
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Set 4G Cost*
- GP Friendly name: *Set 4G Cost*
- GP name: *SetCost4G*
- GP path: *Network/WWAN Service/WWAN Media Cost*
- GP ADMX file name: *wwansvc.admx*

78
windows/client-management/mdm/policy-csp-defender.md
View File

@ -203,7 +203,7 @@ Allows or disallows scanning of archives.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Scan archive files*
- GP Friendly name: *Scan archive files*
- GP name: *Scan_DisableArchiveScanning*
- GP path: *Windows Components/Microsoft Defender Antivirus/Scan*
- GP ADMX file name: *WindowsDefender.admx*
@ -273,7 +273,7 @@ Allows or disallows Windows Defender Behavior Monitoring functionality.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn on behavior monitoring*
- GP Friendly name: *Turn on behavior monitoring*
- GP name: *RealtimeProtection_DisableBehaviorMonitoring*
- GP path: *Windows Components/Microsoft Defender Antivirus/Real-time Protection*
- GP ADMX file name: *WindowsDefender.admx*
@ -343,7 +343,7 @@ To best protect your PC, Windows Defender will send information to Microsoft abo
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Join Microsoft MAPS*
- GP Friendly name: *Join Microsoft MAPS*
- GP name: *SpynetReporting*
- GP element: *SpynetReporting*
- GP path: *Windows Components/Microsoft Defender Antivirus/MAPS*
@ -414,7 +414,7 @@ Allows or disallows scanning of email.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn on e-mail scanning*
- GP Friendly name: *Turn on e-mail scanning*
- GP name: *Scan_DisableEmailScanning*
- GP path: *Windows Components/Microsoft Defender Antivirus/Scan*
- GP ADMX file name: *WindowsDefender.admx*
@ -484,7 +484,7 @@ Allows or disallows a full scan of mapped network drives.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Run full scan on mapped network drives*
- GP Friendly name: *Run full scan on mapped network drives*
- GP name: *Scan_DisableScanningMappedNetworkDrivesForFullScan*
- GP path: *Windows Components/Microsoft Defender Antivirus/Scan*
- GP ADMX file name: *WindowsDefender.admx*
@ -554,7 +554,7 @@ Allows or disallows a full scan of removable drives. During a quick scan, remova
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Scan removable drives*
- GP Friendly name: *Scan removable drives*
- GP name: *Scan_DisableRemovableDriveScanning*
- GP path: *Windows Components/Microsoft Defender Antivirus/Scan*
- GP ADMX file name: *WindowsDefender.admx*
@ -624,7 +624,7 @@ Allows or disallows Windows Defender IOAVP Protection functionality.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Scan all downloaded files and attachments*
- GP Friendly name: *Scan all downloaded files and attachments*
- GP name: *RealtimeProtection_DisableIOAVProtection*
- GP path: *Windows Components/Microsoft Defender Antivirus/Real-time Protection*
- GP ADMX file name: *WindowsDefender.admx*
@ -756,7 +756,7 @@ Allows or disallows Windows Defender On Access Protection functionality.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Monitor file and program activity on your computer*
- GP Friendly name: *Monitor file and program activity on your computer*
- GP name: *RealtimeProtection_DisableOnAccessProtection*
- GP path: *Windows Components/Microsoft Defender Antivirus/Real-time Protection*
- GP ADMX file name: *WindowsDefender.admx*
@ -826,7 +826,7 @@ Allows or disallows Windows Defender Realtime Monitoring functionality.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn off real-time protection*
- GP Friendly name: *Turn off real-time protection*
- GP name: *DisableRealtimeMonitoring*
- GP path: *Windows Components/Microsoft Defender Antivirus/Real-time Protection*
- GP ADMX file name: *WindowsDefender.admx*
@ -896,7 +896,7 @@ Allows or disallows a scanning of network files.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Scan network files*
- GP Friendly name: *Scan network files*
- GP name: *Scan_DisableScanningNetworkFiles*
- GP path: *Windows Components/Microsoft Defender Antivirus/Scan*
- GP ADMX file name: *WindowsDefender.admx*
@ -1028,7 +1028,7 @@ Allows or disallows user access to the Windows Defender UI. If disallowed, all W
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Enable headless UI mode*
- GP Friendly name: *Enable headless UI mode*
- GP name: *UX_Configuration_UILockdown*
- GP path: *Windows Components/Microsoft Defender Antivirus/Client Interface*
- GP ADMX file name: *WindowsDefender.admx*
@ -1100,7 +1100,7 @@ Value type is string.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Exclude files and paths from Attack Surface Reduction Rules*
- GP Friendly name: *Exclude files and paths from Attack Surface Reduction Rules*
- GP name: *ExploitGuard_ASR_ASROnlyExclusions*
- GP element: *ExploitGuard_ASR_ASROnlyExclusions*
- GP path: *Windows Components/Microsoft Defender Antivirus/Windows Defender Exploit Guard/Attack Surface Reduction*
@ -1168,7 +1168,7 @@ Value type is string.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Configure Attack Surface Reduction rules*
- GP Friendly name: *Configure Attack Surface Reduction rules*
- GP name: *ExploitGuard_ASR_Rules*
- GP element: *ExploitGuard_ASR_Rules*
- GP path: *Windows Components/Microsoft Defender Antivirus/Windows Defender Exploit Guard/Attack Surface Reduction*
@ -1235,7 +1235,7 @@ The default value is 50.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Specify the maximum percentage of CPU utilization during a scan*
- GP Friendly name: *Specify the maximum percentage of CPU utilization during a scan*
- GP name: *Scan_AvgCPULoadFactor*
- GP element: *Scan_AvgCPULoadFactor*
- GP path: *Windows Components/Microsoft Defender Antivirus/Scan*
@ -1312,7 +1312,7 @@ OMA-URI Path: ./Vendor/MSFT/Policy/Config/Defender/CheckForSignaturesBeforeRunni
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Check for the latest virus and spyware definitions before running a scheduled scan*
- GP Friendly name: *Check for the latest virus and spyware definitions before running a scheduled scan*
- GP name: *CheckForSignaturesBeforeRunningScan*
- GP element: *CheckForSignaturesBeforeRunningScan*
- GP path: *Windows Components/Microsoft Defender Antivirus/Scan*
@ -1392,7 +1392,7 @@ For more information about specific values that are supported, see the Microsoft
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Select cloud protection level*
- GP Friendly name: *Select cloud protection level*
- GP name: *MpEngine_MpCloudBlockLevel*
- GP element: *MpCloudBlockLevel*
- GP path: *Windows Components/Microsoft Defender Antivirus/MpEngine*
@ -1471,7 +1471,7 @@ For example, if the desired timeout is 60 seconds, specify 50 seconds in this se
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Configure extended cloud check*
- GP Friendly name: *Configure extended cloud check*
- GP name: *MpEngine_MpBafsExtendedTimeout*
- GP element: *MpBafsExtendedTimeout*
- GP path: *Windows Components/Microsoft Defender Antivirus/MpEngine*
@ -1534,7 +1534,7 @@ Added in Windows 10, version 1709. This policy setting allows user-specified app
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Configure allowed applications*
- GP Friendly name: *Configure allowed applications*
- GP name: *ExploitGuard_ControlledFolderAccess_AllowedApplications*
- GP element: *ExploitGuard_ControlledFolderAccess_AllowedApplications*
- GP path: *Windows Components/Microsoft Defender Antivirus/Windows Defender Exploit Guard/Controlled Folder Access*
@ -1597,7 +1597,7 @@ Added in Windows 10, version 1709. This policy settings allows adding user-speci
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Configure protected folders*
- GP Friendly name: *Configure protected folders*
- GP name: *ExploitGuard_ControlledFolderAccess_ProtectedFolders*
- GP element: *ExploitGuard_ControlledFolderAccess_ProtectedFolders*
- GP path: *Windows Components/Microsoft Defender Antivirus/Windows Defender Exploit Guard/Controlled Folder Access*
@ -1664,7 +1664,7 @@ The default value is 0, which keeps items in quarantine, and does not automatica
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Configure removal of items from Quarantine folder*
- GP Friendly name: *Configure removal of items from Quarantine folder*
- GP name: *Quarantine_PurgeItemsAfterDelay*
- GP element: *Quarantine_PurgeItemsAfterDelay*
- GP path: *Windows Components/Microsoft Defender Antivirus/Quarantine*
@ -1739,7 +1739,7 @@ OMA-URI Path: ./Vendor/MSFT/Policy/Config/Defender/DisableCatchupFullScan
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn on catch-up full scan*
- GP Friendly name: *Turn on catch-up full scan*
- GP name: *Scan_DisableCatchupFullScan*
- GP element: *Scan_DisableCatchupFullScan*
- GP path: *Windows Components/Microsoft Defender Antivirus/Scan*
@ -1819,7 +1819,7 @@ OMA-URI Path: ./Vendor/MSFT/Policy/Config/Defender/DisableCatchupQuickScan
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn on catch-up quick scan*
- GP Friendly name: *Turn on catch-up quick scan*
- GP name: *Scan_DisableCatchupQuickScan*
- GP element: *Scan_DisableCatchupQuickScan*
- GP path: *Windows Components/Microsoft Defender Antivirus/Scan*
@ -1891,7 +1891,7 @@ Added in Windows 10, version 1709. This policy enables setting the state (On/Off
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Configure Controlled folder access*
- GP Friendly name: *Configure Controlled folder access*
- GP name: *ExploitGuard_ControlledFolderAccess_EnableControlledFolderAccess*
- GP element: *ExploitGuard_ControlledFolderAccess_EnableControlledFolderAccess*
- GP path: *Windows Components/Microsoft Defender Antivirus/Windows Defender Exploit Guard/Controlled Folder Access*
@ -1968,7 +1968,7 @@ Supported values:
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Configure low CPU priority for scheduled scans*
- GP Friendly name: *Configure low CPU priority for scheduled scans*
- GP name: *Scan_LowCpuPriority*
- GP element: *Scan_LowCpuPriority*
- GP path: *Windows Components/Microsoft Defender Antivirus/Scan*
@ -2046,7 +2046,7 @@ If you do not configure this policy, network blocking will be disabled by defaul
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Prevent users and apps from accessing dangerous websites*
- GP Friendly name: *Prevent users and apps from accessing dangerous websites*
- GP name: *ExploitGuard_EnableNetworkProtection*
- GP element: *ExploitGuard_EnableNetworkProtection*
- GP path: *Windows Components/Microsoft Defender Antivirus/Windows Defender Exploit Guard/Network Protection*
@ -2118,7 +2118,7 @@ Allows an administrator to specify a list of file type extensions to ignore duri
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Path Exclusions*
- GP Friendly name: *Path Exclusions*
- GP name: *Exclusions_Paths*
- GP element: *Exclusions_PathsList*
- GP path: *Windows Components/Microsoft Defender Antivirus/Exclusions*
@ -2182,7 +2182,7 @@ Allows an administrator to specify a list of directory paths to ignore during a
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Extension Exclusions*
- GP Friendly name: *Extension Exclusions*
- GP name: *Exclusions_Extensions*
- GP element: *Exclusions_ExtensionsList*
- GP path: *Windows Components/Microsoft Defender Antivirus/Exclusions*
@ -2252,7 +2252,7 @@ Each file type must be separated by a **|**. For example, "C:\\Example.exe|C:\\E
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Process Exclusions*
- GP Friendly name: *Process Exclusions*
- GP name: *Exclusions_Processes*
- GP element: *Exclusions_ProcessesList*
- GP path: *Windows Components/Microsoft Defender Antivirus/Exclusions*
@ -2319,7 +2319,7 @@ Added in Windows 10, version 1607. Specifies the level of detection for potenti
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Configure detection for potentially unwanted applications*
- GP Friendly name: *Configure detection for potentially unwanted applications*
- GP name: *Root_PUAProtection*
- GP element: *Root_PUAProtection*
- GP path: *Windows Components/Microsoft Defender Antivirus*
@ -2394,7 +2394,7 @@ Controls which sets of files should be monitored.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Configure monitoring for incoming and outgoing file and program activity*
- GP Friendly name: *Configure monitoring for incoming and outgoing file and program activity*
- GP name: *RealtimeProtection_RealtimeScanDirection*
- GP element: *RealtimeProtection_RealtimeScanDirection*
- GP path: *Windows Components/Microsoft Defender Antivirus/Real-time Protection*
@ -2466,7 +2466,7 @@ Selects whether to perform a quick scan or full scan.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Specify the scan type to use for a scheduled scan*
- GP Friendly name: *Specify the scan type to use for a scheduled scan*
- GP name: *Scan_ScanParameters*
- GP element: *Scan_ScanParameters*
- GP path: *Windows Components/Microsoft Defender Antivirus/Scan*
@ -2546,7 +2546,7 @@ The default value is 120
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Specify the time for a daily quick scan*
- GP Friendly name: *Specify the time for a daily quick scan*
- GP name: *Scan_ScheduleQuickScantime*
- GP element: *Scan_ScheduleQuickScantime*
- GP path: *Windows Components/Microsoft Defender Antivirus/Scan*
@ -2617,7 +2617,7 @@ Selects the day that the Windows Defender scan should run.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Specify the day of the week to run a scheduled scan*
- GP Friendly name: *Specify the day of the week to run a scheduled scan*
- GP name: *Scan_ScheduleDay*
- GP element: *Scan_ScheduleDay*
- GP path: *Windows Components/Microsoft Defender Antivirus/Scan*
@ -2704,7 +2704,7 @@ The default value is 120.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Specify the time of day to run a scheduled scan*
- GP Friendly name: *Specify the time of day to run a scheduled scan*
- GP name: *Scan_ScheduleTime*
- GP element: *Scan_ScheduleTime*
- GP path: *Windows Components/Microsoft Defender Antivirus/Scan*
@ -2783,7 +2783,7 @@ OMA-URI Path: ./Vendor/MSFT/Policy/Config/Defender/SignatureUpdateFallbackOrder
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Define the order of sources for downloading definition updates*
- GP Friendly name: *Define the order of sources for downloading definition updates*
- GP name: *SignatureUpdate_FallbackOrder*
- GP element: *SignatureUpdate_FallbackOrder*
- GP path: *Windows Components/Microsoft Defender Antivirus/Signature Updates*
@ -2862,7 +2862,7 @@ OMA-URI Path: ./Vendor/MSFT/Policy/Config/Defender/SignatureUpdateFileSharesSour
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Define file shares for downloading definition updates*
- GP Friendly name: *Define file shares for downloading definition updates*
- GP name: *SignatureUpdate_DefinitionUpdateFileSharesSources*
- GP element: *SignatureUpdate_DefinitionUpdateFileSharesSources*
- GP path: *Windows Components/Microsoft Defender Antivirus/Signature Updates*
@ -2942,7 +2942,7 @@ OMA-URI Path: ./Vendor/MSFT/Policy/Config/Defender/SignatureUpdateInterval
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Specify the interval to check for definition updates*
- GP Friendly name: *Specify the interval to check for definition updates*
- GP name: *SignatureUpdate_SignatureUpdateInterval*
- GP element: *SignatureUpdate_SignatureUpdateInterval*
- GP path: *Windows Components/Microsoft Defender Antivirus/Signature Updates*
@ -3010,7 +3010,7 @@ Checks for the user consent level in Windows Defender to send data. If the requi
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Send file samples when further analysis is required*
- GP Friendly name: *Send file samples when further analysis is required*
- GP name: *SubmitSamplesConsent*
- GP element: *SubmitSamplesConsent*
- GP path: *Windows Components/Microsoft Defender Antivirus/MAPS*
@ -3101,7 +3101,7 @@ The following list shows the supported values for possible actions:
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Specify threat alert levels at which default action should not be taken when detected*
- GP Friendly name: *Specify threat alert levels at which default action should not be taken when detected*
- GP name: *Threats_ThreatSeverityDefaultAction*
- GP element: *Threats_ThreatSeverityDefaultActionList*
- GP path: *Windows Components/Microsoft Defender Antivirus/Threats*

54
windows/client-management/mdm/policy-csp-deliveryoptimization.md
View File

@ -172,7 +172,7 @@ The default value is 10.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Absolute Max Cache Size (in GB)*
- GP Friendly name: *Absolute Max Cache Size (in GB)*
- GP name: *AbsoluteMaxCacheSize*
- GP element: *AbsoluteMaxCacheSize*
- GP path: *Windows Components/Delivery Optimization*
@ -236,7 +236,7 @@ Added in Windows 10, version 1703. Specifies whether the device is allowed to p
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Enable Peer Caching while the device connects via VPN*
- GP Friendly name: *Enable Peer Caching while the device connects via VPN*
- GP name: *AllowVPNPeerCaching*
- GP element: *AllowVPNPeerCaching*
- GP path: *Windows Components/Delivery Optimization*
@ -306,7 +306,7 @@ One or more values can be added as either fully qualified domain names (FQDN) or
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Cache Server Hostname*
- GP Friendly name: *Cache Server Hostname*
- GP name: *CacheHost*
- GP element: *CacheHost*
- GP path: *Windows Components/Delivery Optimization*
@ -376,7 +376,7 @@ This policy allows you to configure one or more Delivery Optimization in Network
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Cache Server Hostname Source*
- GP Friendly name: *Cache Server Hostname Source*
- GP name: *CacheHostSource*
- GP element: *CacheHostSource*
- GP path: *Windows Components/Delivery Optimization*
@ -457,7 +457,7 @@ After the max delay is reached, the download will resume using HTTP, either down
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Delay background download from http (in secs)*
- GP Friendly name: *Delay background download from http (in secs)*
- GP name: *DelayBackgroundDownloadFromHttp*
- GP element: *DelayBackgroundDownloadFromHttp*
- GP path: *Windows Components/Delivery Optimization*
@ -520,7 +520,7 @@ Specifies the time in seconds to delay the fallback from Cache Server to the HTT
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Delay Background download Cache Server fallback (in seconds)*
- GP Friendly name: *Delay Background download Cache Server fallback (in seconds)*
- GP name: *DelayCacheServerFallbackBackground*
- GP element: *DelayCacheServerFallbackBackground*
- GP path: *Windows Components/Delivery Optimization*
@ -593,7 +593,7 @@ Specifies the time in seconds to delay the fallback from Cache Server to the HTT
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Delay Foreground download Cache Server fallback (in seconds)*
- GP Friendly name: *Delay Foreground download Cache Server fallback (in seconds)*
- GP name: *DelayCacheServerFallbackForeground*
- GP element: *DelayCacheServerFallbackForeground*
- GP path: *Windows Components/Delivery Optimization*
@ -667,7 +667,7 @@ The recommended value is 1 minute (60).
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Delay Foreground download from http (in secs)*
- GP Friendly name: *Delay Foreground download from http (in secs)*
- GP name: *DelayForegroundDownloadFromHttp*
- GP element: *DelayForegroundDownloadFromHttp*
- GP path: *Windows Components/Delivery Optimization*
@ -739,7 +739,7 @@ Specifies the download method that Delivery Optimization can use in downloads of
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Download Mode*
- GP Friendly name: *Download Mode*
- GP name: *DownloadMode*
- GP element: *DownloadMode*
- GP path: *Windows Components/Delivery Optimization*
@ -816,7 +816,7 @@ This Policy specifies an arbitrary group ID that the device belongs to. Use this
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Group ID*
- GP Friendly name: *Group ID*
- GP name: *GroupId*
- GP element: *GroupId*
- GP path: *Windows Components/Delivery Optimization*
@ -886,7 +886,7 @@ Starting with Windows 10, version 1903, you can use the Azure Active Directory (
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Select the source of Group IDs*
- GP Friendly name: *Select the source of Group IDs*
- GP name: *GroupIdSource*
- GP element: *GroupIdSource*
- GP path: *Windows Components/Delivery Optimization*
@ -958,7 +958,7 @@ The default value 0 (zero) means that Delivery Optimization dynamically adjusts
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Maximum Background Download Bandwidth (in KB/s)*
- GP Friendly name: *Maximum Background Download Bandwidth (in KB/s)*
- GP name: *MaxBackgroundDownloadBandwidth*
- GP element: *MaxBackgroundDownloadBandwidth*
- GP path: *Windows Components/Delivery Optimization*
@ -1024,7 +1024,7 @@ The default value is 259200 seconds (3 days).
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Max Cache Age (in seconds)*
- GP Friendly name: *Max Cache Age (in seconds)*
- GP name: *MaxCacheAge*
- GP element: *MaxCacheAge*
- GP path: *Windows Components/Delivery Optimization*
@ -1090,7 +1090,7 @@ The default value is 20.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Max Cache Size (percentage)*
- GP Friendly name: *Max Cache Size (percentage)*
- GP name: *MaxCacheSize*
- GP element: *MaxCacheSize*
- GP path: *Windows Components/Delivery Optimization*
@ -1175,7 +1175,7 @@ The default value 0 (zero) means that Delivery Optimization dynamically adjusts
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Maximum Foreground Download Bandwidth (in KB/s)*
- GP Friendly name: *Maximum Foreground Download Bandwidth (in KB/s)*
- GP name: *MaxForegroundDownloadBandwidth*
- GP element: *MaxForegroundDownloadBandwidth*
- GP path: *Windows Components/Delivery Optimization*
@ -1260,7 +1260,7 @@ The default value is 500.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Minimum Background QoS (in KB/s)*
- GP Friendly name: *Minimum Background QoS (in KB/s)*
- GP name: *MinBackgroundQos*
- GP element: *MinBackgroundQos*
- GP path: *Windows Components/Delivery Optimization*
@ -1325,7 +1325,7 @@ The default value is 0. The value 0 (zero) means "not limited" and the cloud ser
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Allow uploads while the device is on battery while under set Battery level (percentage)*
- GP Friendly name: *Allow uploads while the device is on battery while under set Battery level (percentage)*
- GP name: *MinBatteryPercentageAllowedToUpload*
- GP element: *MinBatteryPercentageAllowedToUpload*
- GP path: *Windows Components/Delivery Optimization*
@ -1394,7 +1394,7 @@ The default value is 32 GB.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Minimum disk size allowed to use Peer Caching (in GB)*
- GP Friendly name: *Minimum disk size allowed to use Peer Caching (in GB)*
- GP name: *MinDiskSizeAllowedToPeer*
- GP element: *MinDiskSizeAllowedToPeer*
- GP path: *Windows Components/Delivery Optimization*
@ -1460,7 +1460,7 @@ The default value is 100 MB.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Minimum Peer Caching Content File Size (in MB)*
- GP Friendly name: *Minimum Peer Caching Content File Size (in MB)*
- GP name: *MinFileSizeToCache*
- GP element: *MinFileSizeToCache*
- GP path: *Windows Components/Delivery Optimization*
@ -1526,7 +1526,7 @@ The default value is 4 GB.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Minimum RAM capacity (inclusive) required to enable use of Peer Caching (in GB)*
- GP Friendly name: *Minimum RAM capacity (inclusive) required to enable use of Peer Caching (in GB)*
- GP name: *MinRAMAllowedToPeer*
- GP element: *MinRAMAllowedToPeer*
- GP path: *Windows Components/Delivery Optimization*
@ -1592,7 +1592,7 @@ By default, %SystemDrive% is used to store the cache.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Modify Cache Drive*
- GP Friendly name: *Modify Cache Drive*
- GP name: *ModifyCacheDrive*
- GP element: *ModifyCacheDrive*
- GP path: *Windows Components/Delivery Optimization*
@ -1660,7 +1660,7 @@ The default value is 20.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Monthly Upload Data Cap (in GB)*
- GP Friendly name: *Monthly Upload Data Cap (in GB)*
- GP name: *MonthlyUploadDataCap*
- GP element: *MonthlyUploadDataCap*
- GP path: *Windows Components/Delivery Optimization*
@ -1722,7 +1722,7 @@ Note that downloads from LAN peers will not be throttled even when this policy i
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Maximum Background Download Bandwidth (percentage)*
- GP Friendly name: *Maximum Background Download Bandwidth (percentage)*
- GP name: *PercentageMaxBackgroundBandwidth*
- GP element: *PercentageMaxBackgroundBandwidth*
- GP path: *Windows Components/Delivery Optimization*
@ -1797,7 +1797,7 @@ Note that downloads from LAN peers will not be throttled even when this policy i
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Maximum Foreground Download Bandwidth (percentage)*
- GP Friendly namee: *Maximum Foreground Download Bandwidth (percentage)*
- GP name: *PercentageMaxForegroundBandwidth*
- GP element: *PercentageMaxForegroundBandwidth*
- GP path: *Windows Components/Delivery Optimization*
@ -1860,7 +1860,7 @@ Option 1 (Subnet mask) applies to both Download Mode LAN (1) and Group (2).
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Select a method to restrict Peer Selection*
- GP Friendly name: *Select a method to restrict Peer Selection*
- GP name: *RestrictPeerSelectionBy*
- GP element: *RestrictPeerSelectionBy*
- GP path: *Windows Components/Delivery Optimization*
@ -1933,7 +1933,7 @@ Added in Windows&nbsp;10, version 1803. Specifies the maximum background downloa
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Set Business Hours to Limit Background Download Bandwidth*
- GP Friendly name: *Set Business Hours to Limit Background Download Bandwidth*
- GP name: *SetHoursToLimitBackgroundDownloadBandwidth*
- GP path: *Windows Components/Delivery Optimization*
- GP ADMX file name: *DeliveryOptimization.admx*
@ -2007,7 +2007,7 @@ Added in Windows&nbsp;10, version 1803. Specifies the maximum foreground downloa
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Set Business Hours to Limit Foreground Download Bandwidth*
- GP Friendly name: *Set Business Hours to Limit Foreground Download Bandwidth*
- GP name: *SetHoursToLimitForegroundDownloadBandwidth*
- GP path: *Windows Components/Delivery Optimization*
- GP ADMX file name: *DeliveryOptimization.admx*

2
windows/client-management/mdm/policy-csp-desktop.md
View File

@ -90,7 +90,7 @@ If you enable this setting, users are unable to type a new location in the Targe
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Prohibit User from manually redirecting Profile Folders*
- GP Friendly name: *Prohibit User from manually redirecting Profile Folders*
- GP name: *DisablePersonalDirChange*
- GP path: *Desktop*
- GP ADMX file name: *desktop.admx*

8
windows/client-management/mdm/policy-csp-deviceguard.md
View File

@ -95,7 +95,7 @@ For more information about System Guard, see [Introducing Windows Defender Syste
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn On Virtualization Based Security*
- GP Friendly name: *Turn On Virtualization Based Security*
- GP name: *VirtualizationBasedSecurity*
- GP element: *SystemGuardDrop*
- GP path: *System/Device Guard*
@ -164,7 +164,7 @@ Added in Windows 10, version 1709. Turns on virtualization based security(VBS) a
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn On Virtualization Based Security*
- GP Friendly name: *Turn On Virtualization Based Security*
- GP name: *VirtualizationBasedSecurity*
- GP path: *System/Device Guard*
- GP ADMX file name: *DeviceGuard.admx*
@ -230,7 +230,7 @@ Added in Windows 10, version 1709. This setting lets users turn on Credential Gu
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn On Virtualization Based Security*
- GP Friendly name: *Turn On Virtualization Based Security*
- GP name: *VirtualizationBasedSecurity*
- GP element: *CredentialIsolationDrop*
- GP path: *System/Device Guard*
@ -298,7 +298,7 @@ Added in Windows 10, version 1709. Specifies the platform security level at the
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn On Virtualization Based Security*
- GP Friendly name: *Turn On Virtualization Based Security*
- GP name: *VirtualizationBasedSecurity*
- GP element: *RequirePlatformSecurityFeaturesDrop*
- GP path: *System/Device Guard*

18
windows/client-management/mdm/policy-csp-deviceinstallation.md
View File

@ -129,7 +129,7 @@ Peripherals can be specified by their [hardware identity](/windows-hardware/driv
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Allow installation of devices that match any of these device IDs*
- GP Friendly name: *Allow installation of devices that match any of these device IDs*
- GP name: *DeviceInstall_IDs_Allow*
- GP path: *System/Device Installation/Device Installation Restrictions*
- GP ADMX file name: *deviceinstallation.admx*
@ -253,7 +253,7 @@ Peripherals can be specified by their [device instance ID](/windows-hardware/dri
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Allow installation of devices that match any of these device instance IDs*
- GP Friendly name: *Allow installation of devices that match any of these device instance IDs*
- GP name: *DeviceInstall_Instance_IDs_Allow*
- GP path: *System/Device Installation/Device Installation Restrictions*
- GP ADMX file name: *deviceinstallation.admx*
@ -376,7 +376,7 @@ Peripherals can be specified by their [hardware identity](/windows-hardware/driv
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Allow installation of devices using drivers that match these device setup classes*
- GP Friendly name: *Allow installation of devices using drivers that match these device setup classes*
- GP name: *DeviceInstall_Classes_Allow*
- GP path: *System/Device Installation/Device Installation Restrictions*
- GP ADMX file name: *deviceinstallation.admx*
@ -509,7 +509,7 @@ If you disable or do not configure this policy setting, the default evaluation i
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria*
- GP Friendly name: *Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria*
- GP name: *DeviceInstall_Allow_Deny_Layered*
- GP path: *System/Device Installation/Device Installation Restrictions*
- GP ADMX file name: *deviceinstallation.admx*
@ -618,7 +618,7 @@ If you disable or do not configure this policy setting, the setting in the Devic
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Prevent device metadata retrieval from the Internet*
- GP Friendly name: *Prevent device metadata retrieval from the Internet*
- GP name: *DeviceMetadata_PreventDeviceMetadataFromNetwork*
- GP path: *System/Device Installation*
- GP ADMX file name: *DeviceSetup.admx*
@ -700,7 +700,7 @@ If you disable or do not configure this policy setting, Windows is allowed to in
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Prevent installation of devices not described by other policy settings*
- GP Friendly name: *Prevent installation of devices not described by other policy settings*
- GP name: *DeviceInstall_Unspecified_Deny*
- GP path: *System/Device Installation/Device Installation Restrictions*
- GP ADMX file name: *deviceinstallation.admx*
@ -817,7 +817,7 @@ Peripherals can be specified by their [hardware identity](/windows-hardware/driv
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Prevent installation of devices that match any of these device IDs*
- GP Friendly name: *Prevent installation of devices that match any of these device IDs*
- GP name: *DeviceInstall_IDs_Deny*
- GP path: *System/Device Installation/Device Installation Restrictions*
- GP ADMX file name: *deviceinstallation.admx*
@ -934,7 +934,7 @@ Peripherals can be specified by their [device instance ID](/windows-hardware/dri
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Prevent installation of devices that match any of these device instance IDs*
- GP Friendly name: *Prevent installation of devices that match any of these device instance IDs*
- GP name: *DeviceInstall_Instance_IDs_Deny*
- GP path: *System/Device Installation/Device Installation Restrictions*
- GP ADMX file name: *deviceinstallation.admx*
@ -1064,7 +1064,7 @@ Peripherals can be specified by their [hardware identity](/windows-hardware/driv
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Prevent installation of devices using drivers that match these device setup classes*
- GP Friendly name: *Prevent installation of devices using drivers that match these device setup classes*
- GP name: *DeviceInstall_Classes_Deny*
- GP path: *System/Device Installation/Device Installation Restrictions*
- GP ADMX file name: *deviceinstallation.admx*

6
windows/client-management/mdm/policy-csp-devicelock.md
View File

@ -969,7 +969,7 @@ Configure the minimum password age to be more than 0 if you want Enforce passwor
<!--/Description-->
<!--DbMapped-->
GP Info:
- GP English name: *Minimum password age*
- GP Friendly name: *Minimum password age*
- GP path: *Windows Settings/Security Settings/Account Policies/Password Policy*
<!--/DbMapped-->
@ -1037,7 +1037,7 @@ If you enable this setting, users will no longer be able to enable or disable lo
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Prevent enabling lock screen camera*
- GP Friendly name: *Prevent enabling lock screen camera*
- GP name: *CPL_Personalization_NoLockScreenCamera*
- GP path: *Control Panel/Personalization*
- GP ADMX file name: *ControlPanelDisplay.admx*
@ -1107,7 +1107,7 @@ If you enable this setting, users will no longer be able to modify slide show se
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Prevent enabling lock screen slide show*
- GP Friendly name: *Prevent enabling lock screen slide show*
- GP name: *CPL_Personalization_NoLockScreenSlideshow*
- GP path: *Control Panel/Personalization*
- GP ADMX file name: *ControlPanelDisplay.admx*

10
windows/client-management/mdm/policy-csp-display.md
View File

@ -91,7 +91,7 @@ This policy allows you to disable Per-Process System DPI for a semicolon-separat
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Configure Per-Process System DPI settings*
- GP Friendly name: *Configure Per-Process System DPI settings*
- GP name: *DisplayPerProcessSystemDpiSettings*
- GP element: *DisplayDisablePerProcessSystemDpiSettings*
- GP path: *System/Display*
@ -164,7 +164,7 @@ Enabling this setting lets you specify the system-wide default for desktop appli
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Configure Per-Process System DPI settings*
- GP Friendly name: *Configure Per-Process System DPI settings*
- GP name: *DisplayPerProcessSystemDpiSettings*
- GP element: *DisplayGlobalPerProcessSystemDpiSettings*
- GP path: *System/Display*
@ -231,7 +231,7 @@ This policy allows you to enable Per-Process System DPI for a semicolon-separate
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Configure Per-Process System DPI settings*
- GP Friendly name: *Configure Per-Process System DPI settings*
- GP name: *DisplayPerProcessSystemDpiSettings*
- GP element: *DisplayEnablePerProcessSystemDpiSettings*
- GP path: *System/Display*
@ -299,7 +299,7 @@ If GDI DPI Scaling is configured to both turn off and turn on an application, th
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn off GdiDPIScaling for applications*
- GP Friendly name: *Turn off GdiDPIScaling for applications*
- GP name: *DisplayTurnOffGdiDPIScaling*
- GP element: *DisplayTurnOffGdiDPIScalingPrompt*
- GP path: *System/Display*
@ -374,7 +374,7 @@ If GDI DPI Scaling is configured to both turn off and turn on an application, th
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn on GdiDPIScaling for applications*
- GP Friendly name: *Turn on GdiDPIScaling for applications*
- GP name: *DisplayTurnOnGdiDPIScaling*
- GP element: *DisplayTurnOnGdiDPIScalingPrompt*
- GP path: *System/Display*

2
windows/client-management/mdm/policy-csp-dmaguard.md
View File

@ -93,7 +93,7 @@ Supported values:
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Enumeration policy for external devices incompatible with Kernel DMA Protection*
- GP Friendly name: *Enumeration policy for external devices incompatible with Kernel DMA Protection*
- GP name: *DmaGuardEnumerationPolicy*
- GP path: *System/Kernel DMA Protection*
- GP ADMX file name: *dmaguard.admx*

4
windows/client-management/mdm/policy-csp-education.md
View File

@ -86,7 +86,7 @@ Added in Windows 10, version 2004. This policy setting allows you to control whe
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Allow Graphing Calculator*
- GP Friendly name: *Allow Graphing Calculator*
- GP name: *AllowGraphingCalculator*
- GP path: *Windows Components/Calculator*
- GP ADMX file name: *Programs.admx*
@ -203,7 +203,7 @@ Added in Windows 10, version 1709. Allows IT Admins to prevent user installatio
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Prevent addition of printers*
- GP Friendly name: *Prevent addition of printers*
- GP name: *NoAddPrinter*
- GP path: *Control Panel/Printers*
- GP ADMX file name: *Printing.admx*

10
windows/client-management/mdm/policy-csp-errorreporting.md
View File

@ -112,7 +112,7 @@ If you disable or do not configure this policy setting, then the default consent
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Customize consent settings*
- GP Friendly name: *Customize consent settings*
- GP name: *WerConsentCustomize_2*
- GP path: *Windows Components/Windows Error Reporting/Consent*
- GP ADMX file name: *ErrorReporting.admx*
@ -182,7 +182,7 @@ If you disable or do not configure this policy setting, the Turn off Windows Err
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Disable Windows Error Reporting*
- GP Friendly name: *Disable Windows Error Reporting*
- GP name: *WerDisable_2*
- GP path: *Windows Components/Windows Error Reporting*
- GP ADMX file name: *ErrorReporting.admx*
@ -256,7 +256,7 @@ See also the Configure Error Reporting policy setting.
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Display Error Notification*
- GP Friendly name: *Display Error Notification*
- GP name: *PCH_ShowUI*
- GP path: *Windows Components/Windows Error Reporting*
- GP ADMX file name: *ErrorReporting.admx*
@ -326,7 +326,7 @@ If you disable or do not configure this policy setting, then consent policy sett
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Do not send additional data*
- GP Friendly name: *Do not send additional data*
- GP name: *WerNoSecondLevelData_2*
- GP path: *Windows Components/Windows Error Reporting*
- GP ADMX file name: *ErrorReporting.admx*
@ -396,7 +396,7 @@ If you disable or do not configure this policy setting, Windows Error Reporting
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Prevent display of the user interface for critical errors*
- GP Friendly name: *Prevent display of the user interface for critical errors*
- GP name: *WerDoNotShowUI*
- GP path: *Windows Components/Windows Error Reporting*
- GP ADMX file name: *ErrorReporting.admx*

8
windows/client-management/mdm/policy-csp-eventlogservice.md
View File

@ -101,7 +101,7 @@ Note: Old events may or may not be retained according to the "Backup log automat
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Control Event Log behavior when the log file reaches its maximum size*
- GP Friendly name: *Control Event Log behavior when the log file reaches its maximum size*
- GP name: *Channel_Log_Retention_1*
- GP path: *Windows Components/Event Log Service/Application*
- GP ADMX file name: *eventlog.admx*
@ -171,7 +171,7 @@ If you disable or do not configure this policy setting, the maximum size of the
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Specify the maximum log file size (KB)*
- GP Friendly name: *Specify the maximum log file size (KB)*
- GP name: *Channel_LogMaxSize_1*
- GP path: *Windows Components/Event Log Service/Application*
- GP ADMX file name: *eventlog.admx*
@ -241,7 +241,7 @@ If you disable or do not configure this policy setting, the maximum size of the
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Specify the maximum log file size (KB)*
- GP Friendly name: *Specify the maximum log file size (KB)*
- GP name: *Channel_LogMaxSize_2*
- GP path: *Windows Components/Event Log Service/Security*
- GP ADMX file name: *eventlog.admx*
@ -311,7 +311,7 @@ If you disable or do not configure this policy setting, the maximum size of the
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Specify the maximum log file size (KB)*
- GP Friendly name: *Specify the maximum log file size (KB)*
- GP name: *Channel_LogMaxSize_4*
- GP path: *Windows Components/Event Log Service/System*
- GP ADMX file name: *eventlog.admx*

34
windows/client-management/mdm/policy-csp-experience.md
View File

@ -152,7 +152,7 @@ Value type is integer. Supported values:
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Allow Clipboard History*
- GP Friendly name: *Allow Clipboard History*
- GP name: *AllowClipboardHistory*
- GP path: *System/OS Policies*
- GP ADMX file name: *OSPolicy.admx*
@ -229,7 +229,7 @@ Most restricted value is 0.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Allow Cortana*
- GP Friendly name: *Allow Cortana*
- GP name: *AllowCortana*
- GP path: *Windows Components/Search*
- GP ADMX file name: *Search.admx*
@ -361,7 +361,7 @@ When Find My Device is off, the device and its location are not registered and t
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn On/Off Find My Device*
- GP Friendly name: *Turn On/Off Find My Device*
- GP name: *FindMy_AllowFindMyDeviceConfig*
- GP path: *Windows Components/Find My Device*
- GP ADMX file name: *FindMy.admx*
@ -642,7 +642,7 @@ Most restricted value is 0.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Do not use diagnostic data for tailored experiences*
- GP Friendly name: *Do not use diagnostic data for tailored experiences*
- GP name: *DisableTailoredExperiencesWithDiagnosticData*
- GP path: *Windows Components/Cloud Content*
- GP ADMX file name: *CloudContent.admx*
@ -712,7 +712,7 @@ Specifies whether to allow app and content suggestions from third-party software
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Do not suggest third-party content in Windows spotlight*
- GP Friendly name: *Do not suggest third-party content in Windows spotlight*
- GP name: *DisableThirdPartySuggestions*
- GP path: *Windows Components/Cloud Content*
- GP ADMX file name: *CloudContent.admx*
@ -785,7 +785,7 @@ Most restricted value is 0.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn off Microsoft consumer experiences*
- GP Friendly name: *Turn off Microsoft consumer experiences*
- GP name: *DisableWindowsConsumerFeatures*
- GP path: *Windows Components/Cloud Content*
- GP ADMX file name: *CloudContent.admx*
@ -857,7 +857,7 @@ Most restricted value is 0.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn off all Windows spotlight features*
- GP Friendly name: *Turn off all Windows spotlight features*
- GP name: *DisableWindowsSpotlightFeatures*
- GP path: *Windows Components/Cloud Content*
- GP ADMX file name: *CloudContent.admx*
@ -928,7 +928,7 @@ Most restricted value is 0.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn off Windows Spotlight on Action Center*
- GP Friendly name: *Turn off Windows Spotlight on Action Center*
- GP name: *DisableWindowsSpotlightOnActionCenter*
- GP path: *Windows Components/Cloud Content*
- GP ADMX file name: *CloudContent.admx*
@ -998,7 +998,7 @@ Added in Windows 10, version 1803. This policy allows IT admins to turn off Sugg
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn off Windows Spotlight on Settings*
- GP Friendly name: *Turn off Windows Spotlight on Settings*
- GP name: *DisableWindowsSpotlightOnSettings*
- GP path: *Windows Components/Cloud Content*
- GP ADMX file name: *CloudContent.admx*
@ -1070,7 +1070,7 @@ Most restricted value is 0.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn off the Windows Welcome Experience*
- GP Friendly name: *Turn off the Windows Welcome Experience*
- GP name: *DisableWindowsSpotlightWindowsWelcomeExperience*
- GP path: *Windows Components/Cloud Content*
- GP ADMX file name: *CloudContent.admx*
@ -1136,7 +1136,7 @@ Enables or disables Windows Tips / soft landing.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Do not show Windows tips*
- GP Friendly name: *Do not show Windows tips*
- GP name: *DisableSoftLanding*
- GP path: *Windows Components/Cloud Content*
- GP ADMX file name: *CloudContent.admx*
@ -1264,7 +1264,7 @@ Allows IT admins to specify whether spotlight should be used on the user's lock
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Configure Windows spotlight on lock screen*
- GP Friendly name: *Configure Windows spotlight on lock screen*
- GP name: *ConfigureWindowsSpotlight*
- GP path: *Windows Components/Cloud Content*
- GP ADMX file name: *CloudContent.admx*
@ -1333,7 +1333,7 @@ If you disable or do not configure this policy setting, Windows experiences will
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn off cloud optimized content*
- GP Friendly name: *Turn off cloud optimized content*
- GP name: *DisableCloudOptimizedContent*
- GP path: *Windows Components/Cloud Content*
- GP ADMX file name: *CloudContent.admx*
@ -1403,7 +1403,7 @@ If you disable or do not configure this policy setting, users can control how of
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Do not show feedback notifications*
- GP Friendly name: *Do not show feedback notifications*
- GP name: *DoNotShowFeedbackNotifications*
- GP path: *Data Collection and Preview Builds*
- GP ADMX file name: *FeedbackNotifications.admx*
@ -1472,7 +1472,7 @@ Related policy:
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Do not sync browser settings*
- GP Friendly name: *Do not sync browser settings*
- GP name: *DisableWebBrowserSettingSync*
- GP path: *Windows Components/Sync your settings*
- GP ADMX file name: *SettingSync.admx*
@ -1567,7 +1567,7 @@ Related policy:
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Prevent users from turning on browser syncing*
- GP Friendly name: *Prevent users from turning on browser syncing*
- GP name: *PreventUsersFromTurningOnBrowserSyncing*
- GP path: *Windows Components/Sync your settings*
- GP ADMX file name: *SettingSync.admx*
@ -1664,7 +1664,7 @@ If you do not configure this policy setting, the lock option is shown in the Use
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Show lock in the user tile menu*
- GP Friendly name: *Show lock in the user tile menu*
- GP name: *ShowLockOption*
- GP path: *File Explorer*
- GP ADMX file name: *WindowsExplorer.admx*

2
windows/client-management/mdm/policy-csp-exploitguard.md
View File

@ -81,7 +81,7 @@ The system settings require a reboot; the application settings do not require a
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Use a common set of exploit protection settings*
- GP Friendly name: *Use a common set of exploit protection settings*
- GP name: *ExploitProtection_Name*
- GP element: *ExploitProtection_Name*
- GP path: *Windows Components/Windows Defender Exploit Guard/Exploit Protection*

4
windows/client-management/mdm/policy-csp-fileexplorer.md
View File

@ -89,7 +89,7 @@ Disabling data execution prevention can allow certain legacy plug-in application
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Turn off Data Execution Prevention for Explorer*
- GP Friendly name: *Turn off Data Execution Prevention for Explorer*
- GP name: *NoDataExecutionPrevention*
- GP path: *File Explorer*
- GP ADMX file name: *Explorer.admx*
@ -155,7 +155,7 @@ Disabling heap termination on corruption can allow certain legacy plug-in applic
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Turn off heap termination on corruption*
- GP Friendly name: *Turn off heap termination on corruption*
- GP name: *NoHeapTerminationOnCorruption*
- GP path: *File Explorer*
- GP ADMX file name: *Explorer.admx*

2
windows/client-management/mdm/policy-csp-handwriting.md
View File

@ -85,7 +85,7 @@ The docked mode is especially useful in Kiosk mode where you do not expect the e
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Handwriting Panel Default Mode Docked*
- GP Friendly name: *Handwriting Panel Default Mode Docked*
- GP name: *PanelDefaultModeDocked*
- GP path: *Windows Components/Handwriting*
- GP ADMX file name: *Handwriting.admx*

514
windows/client-management/mdm/policy-csp-internetexplorer.md
View File

File diff suppressed because it is too large Load Diff

10
windows/client-management/mdm/policy-csp-kerberos.md
View File

@ -104,7 +104,7 @@ If you disable or do not configure this policy setting, the Kerberos client does
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Use forest search order*
- GP Friendly name: *Use forest search order*
- GP name: *ForestSearch*
- GP path: *System/Kerberos*
- GP ADMX file name: *Kerberos.admx*
@ -173,7 +173,7 @@ If you disable or do not configure this policy setting, the client devices will
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Kerberos client support for claims, compound authentication and Kerberos armoring*
- GP Friendly name: *Kerberos client support for claims, compound authentication and Kerberos armoring*
- GP name: *EnableCbacAndArmor*
- GP path: *System/Kerberos*
- GP ADMX file name: *Kerberos.admx*
@ -247,7 +247,7 @@ If you disable or do not configure this policy setting, the client computers in
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Fail authentication requests when Kerberos armoring is not available*
- GP Friendly name: *Fail authentication requests when Kerberos armoring is not available*
- GP name: *ClientRequireFast*
- GP path: *System/Kerberos*
- GP ADMX file name: *Kerberos.admx*
@ -317,7 +317,7 @@ If you disable or do not configure this policy setting, the Kerberos client requ
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Require strict KDC validation*
- GP Friendly name: *Require strict KDC validation*
- GP name: *ValidateKDC*
- GP path: *System/Kerberos*
- GP ADMX file name: *Kerberos.admx*
@ -391,7 +391,7 @@ Note: This policy setting configures the existing MaxTokenSize registry value in
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Set maximum Kerberos SSPI context token buffer size*
- GP Friendly name: *Set maximum Kerberos SSPI context token buffer size*
- GP name: *MaxTokenSize*
- GP path: *System/Kerberos*
- GP ADMX file name: *Kerberos.admx*

2
windows/client-management/mdm/policy-csp-lanmanworkstation.md
View File

@ -85,7 +85,7 @@ Insecure guest logons are used by file servers to allow unauthenticated access t
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Enable insecure guest logons*
- GP Friendly name: *Enable insecure guest logons*
- GP name: *Pol_EnableInsecureGuestLogons*
- GP path: *Network/Lanman Workstation*
- GP ADMX file name: *LanmanWorkstation.admx*

4
windows/client-management/mdm/policy-csp-licensing.md
View File

@ -82,7 +82,7 @@ Added in Windows 10, version 1607. Enables or Disable Windows license reactivat
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Control Device Reactivation for Retail devices*
- GP Friendly name: *Control Device Reactivation for Retail devices*
- GP name: *AllowWindowsEntitlementReactivation*
- GP path: *Windows Components/Software Protection Platform*
- GP ADMX file name: *AVSValidationGP.admx*
@ -148,7 +148,7 @@ Added in Windows 10, version 1607. Enabling this setting prevents this computer
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn off KMS Client Online AVS Validation*
- GP Friendly name: *Turn off KMS Client Online AVS Validation*
- GP name: *NoAcquireGT*
- GP path: *Windows Components/Software Protection Platform*
- GP ADMX file name: *AVSValidationGP.admx*

94
windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md
View File

@ -224,7 +224,7 @@ Value type is integer. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Accounts: Block Microsoft accounts*
- GP Friendly name: *Accounts: Block Microsoft accounts*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -302,7 +302,7 @@ Value type is integer. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Accounts: Limit local account use of blank passwords to console logon only*
- GP Friendly name: *Accounts: Limit local account use of blank passwords to console logon only*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -371,7 +371,7 @@ Value type is string. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--DbMapped-->
GP Info:
- GP English name: *Accounts: Rename administrator account*
- GP Friendly name: *Accounts: Rename administrator account*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/DbMapped-->
@ -434,7 +434,7 @@ Value type is string. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--DbMapped-->
GP Info:
- GP English name: *Accounts: Rename guest account*
- GP Friendly name: *Accounts: Rename guest account*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/DbMapped-->
@ -498,7 +498,7 @@ Disabling this policy may tempt users to try and physically remove the laptop fr
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Devices: Allow undock without having to log on*
- GP Friendly name: *Devices: Allow undock without having to log on*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -562,7 +562,7 @@ Default: This policy is not defined and only Administrators have this ability.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Devices: Allowed to format and eject removable media*
- GP Friendly name: *Devices: Allowed to format and eject removable media*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -628,7 +628,7 @@ This setting does not affect the ability to add a local printer. This setting do
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Devices: Prevent users from installing printer drivers*
- GP Friendly name: *Devices: Prevent users from installing printer drivers*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -691,7 +691,7 @@ Default: This policy is not defined and CD-ROM access is not restricted to the l
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Devices: Restrict CD-ROM access to locally logged-on user only*
- GP Friendly name: *Devices: Restrict CD-ROM access to locally logged-on user only*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -751,7 +751,7 @@ Value type is integer. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Interactive logon: Display user information when the session is locked*
- GP Friendly name: *Interactive logon: Display user information when the session is locked*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -824,7 +824,7 @@ Value type is integer. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Interactive logon: Don't display last signed-in*
- GP Friendly name: *Interactive logon: Don't display last signed-in*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -897,7 +897,7 @@ Value type is integer. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Interactive logon: Don't display username at sign-in*
- GP Friendly name: *Interactive logon: Don't display username at sign-in*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -971,7 +971,7 @@ Value type is integer. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Interactive logon: Do not require CTRL+ALT+DEL*
- GP Friendly name: *Interactive logon: Do not require CTRL+ALT+DEL*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -1040,7 +1040,7 @@ Value type is integer. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Interactive logon: Machine inactivity limit*
- GP Friendly name: *Interactive logon: Machine inactivity limit*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -1109,7 +1109,7 @@ Value type is string. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Interactive logon: Message text for users attempting to log on*
- GP Friendly name: *Interactive logon: Message text for users attempting to log on*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -1172,7 +1172,7 @@ Value type is string. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Interactive logon: Message title for users attempting to log on*
- GP Friendly name: *Interactive logon: Message title for users attempting to log on*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -1251,7 +1251,7 @@ On Windows Vista and above: For this setting to work, the Smart Card Removal Pol
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Interactive logon: Smart card removal behavior*
- GP Friendly name: *Interactive logon: Smart card removal behavior*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -1327,7 +1327,7 @@ For more information, reference: https://go.microsoft.com/fwlink/?LinkID=787136.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Microsoft network client: Digitally sign communications (if server agrees)*
- GP Friendly name: *Microsoft network client: Digitally sign communications (if server agrees)*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -1390,7 +1390,7 @@ Default: Disabled.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Microsoft network client: Send unencrypted password to third-party SMB servers*
- GP Friendly name: *Microsoft network client: Send unencrypted password to third-party SMB servers*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -1459,7 +1459,7 @@ Default:This policy is not defined, which means that the system treats it as 15
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Microsoft network server: Amount of idle time required before suspending session*
- GP Friendly name: *Microsoft network server: Amount of idle time required before suspending session*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -1556,7 +1556,7 @@ For more information, reference: https://go.microsoft.com/fwlink/?LinkID=787136.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Microsoft network server: Digitally sign communications (always)*
- GP Friendly name: *Microsoft network server: Digitally sign communications (always)*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -1636,7 +1636,7 @@ For more information, reference: https://go.microsoft.com/fwlink/?LinkID=787136.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Microsoft network server: Digitally sign communications (if client agrees)*
- GP Friendly name: *Microsoft network server: Digitally sign communications (if client agrees)*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -1709,7 +1709,7 @@ This policy has no impact on domain controllers.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Network access: Do not allow anonymous enumeration of SAM accounts*
- GP Friendly name: *Network access: Do not allow anonymous enumeration of SAM accounts*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -1772,7 +1772,7 @@ Default: Disabled.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Network access: Do not allow anonymous enumeration of SAM accounts and shares*
- GP Friendly name: *Network access: Do not allow anonymous enumeration of SAM accounts and shares*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -1835,7 +1835,7 @@ Default: Enabled.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Network access: Restrict anonymous access to Named Pipes and Shares*
- GP Friendly name: *Network access: Restrict anonymous access to Named Pipes and Shares*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -1898,7 +1898,7 @@ This policy is supported on at least Windows Server 2016.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Network access: Restrict clients allowed to make remote calls to SAM*
- GP Friendly name: *Network access: Restrict clients allowed to make remote calls to SAM*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -1959,7 +1959,7 @@ When a service connects with the device identity, signing and encryption are sup
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Network security: Allow Local System to use computer identity for NTLM*
- GP Friendly name: *Network security: Allow Local System to use computer identity for NTLM*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -2027,7 +2027,7 @@ Value type is integer. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Network security: Allow PKU2U authentication requests to this computer to use online identities.*
- GP Friendly name: *Network security: Allow PKU2U authentication requests to this computer to use online identities.*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -2101,7 +2101,7 @@ This setting can affect the ability of computers running Windows 2000 Server, Wi
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Network security: Do not store LAN Manager hash value on next password change*
- GP Friendly name: *Network security: Do not store LAN Manager hash value on next password change*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -2184,7 +2184,7 @@ Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: Send
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Network security: LAN Manager authentication level*
- GP Friendly name: *Network security: LAN Manager authentication level*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -2252,7 +2252,7 @@ Windows 7 and Windows Server 2008 R2: Require 128-bit encryption.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Network security: Minimum session security for NTLM SSP based (including secure RPC) clients*
- GP Friendly name: *Network security: Minimum session security for NTLM SSP based (including secure RPC) clients*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -2320,7 +2320,7 @@ Windows 7 and Windows Server 2008 R2: Require 128-bit encryption
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Network security: Minimum session security for NTLM SSP based (including secure RPC) servers*
- GP Friendly name: *Network security: Minimum session security for NTLM SSP based (including secure RPC) servers*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -2385,7 +2385,7 @@ The naming format for servers on this exception list is the fully qualified doma
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication*
- GP Friendly name: *Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -2464,7 +2464,7 @@ This policy is supported on at least Windows 7 or Windows Server 2008 R2.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Network security: Restrict NTLM: Audit Incoming NTLM Traffic*
- GP Friendly name: *Network security: Restrict NTLM: Audit Incoming NTLM Traffic*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -2543,7 +2543,7 @@ This policy is supported on at least Windows 7 or Windows Server 2008 R2.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Network security: Restrict NTLM: Incoming NTLM traffic*
- GP Friendly name: *Network security: Restrict NTLM: Incoming NTLM traffic*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -2622,7 +2622,7 @@ This policy is supported on at least Windows 7 or Windows Server 2008 R2.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers*
- GP Friendly name: *Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -2699,7 +2699,7 @@ Value type is integer. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Shutdown: Allow system to be shut down without having to log on*
- GP Friendly name: *Shutdown: Allow system to be shut down without having to log on*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -2770,7 +2770,7 @@ Default: Disabled.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *Shutdown: Clear virtual memory pagefile*
- GP Friendly name: *Shutdown: Clear virtual memory pagefile*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -2837,7 +2837,7 @@ Value type is integer. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop*
- GP Friendly name: *User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -2920,7 +2920,7 @@ Value type is integer. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode*
- GP Friendly name: *User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -2980,7 +2980,7 @@ Value type is integer. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *User Account Control: Behavior of the elevation prompt for standard users*
- GP Friendly name: *User Account Control: Behavior of the elevation prompt for standard users*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -3053,7 +3053,7 @@ Disabled: Application installation packages are not detected and prompted for el
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *User Account Control: Detect application installations and prompt for elevation*
- GP Friendly name: *User Account Control: Detect application installations and prompt for elevation*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -3118,7 +3118,7 @@ Value type is integer. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *User Account Control: Only elevate executables that are signed and validated*
- GP Friendly name: *User Account Control: Only elevate executables that are signed and validated*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -3190,7 +3190,7 @@ Value type is integer. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *User Account Control: Only elevate UIAccess applications that are installed in secure locations*
- GP Friendly name: *User Account Control: Only elevate UIAccess applications that are installed in secure locations*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -3258,7 +3258,7 @@ Value type is integer. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *User Account Control: Run all administrators in Admin Approval Mode*
- GP Friendly name: *User Account Control: Run all administrators in Admin Approval Mode*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -3323,7 +3323,7 @@ Value type is integer. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *User Account Control: Switch to the secure desktop when prompting for elevation*
- GP Friendly name: *User Account Control: Switch to the secure desktop when prompting for elevation*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -3388,7 +3388,7 @@ The options are:
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *User Account Control: Admin Approval Mode for the Built-in Administrator account*
- GP Friendly name: *User Account Control: Admin Approval Mode for the Built-in Administrator account*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->
@ -3449,7 +3449,7 @@ Value type is integer. Supported operations are Add, Get, Replace, and Delete.
<!--/Description-->
<!--RegistryMapped-->
GP Info:
- GP English name: *User Account Control: Virtualize file and registry write failures to per-user locations*
- GP Friendly name: *User Account Control: Virtualize file and registry write failures to per-user locations*
- GP path: *Windows Settings/Security Settings/Local Policies/Security Options*
<!--/RegistryMapped-->

2
windows/client-management/mdm/policy-csp-lockdown.md
View File

@ -81,7 +81,7 @@ The easiest way to verify the policy is to restart the explorer process or to re
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Allow edge swipe*
- GP Friendly name: *Allow edge swipe*
- GP name: *AllowEdgeSwipe*
- GP path: *Windows Components/Edge UI*
- GP ADMX file name: *EdgeUI.admx*

2
windows/client-management/mdm/policy-csp-maps.md
View File

@ -145,7 +145,7 @@ After the policy is applied, you can verify the settings in the user interface i
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn off Automatic Download and Update of Map Data*
- GP Friendly name: *Turn off Automatic Download and Update of Map Data*
- GP name: *TurnOffAutoUpdate*
- GP path: *Windows Components/Maps*
- GP ADMX file name: *WinMaps.admx*

2
windows/client-management/mdm/policy-csp-messaging.md
View File

@ -79,7 +79,7 @@ Added in Windows 10, version 1607. Enables text message back up and restore and
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Allow Message Service Cloud Sync*
- GP Friendly name: *Allow Message Service Cloud Sync*
- GP name: *AllowMessageSync*
- GP path: *Windows Components/Messaging*
- GP ADMX file name: *messaging.admx*

2
windows/client-management/mdm/policy-csp-multitasking.md
View File

@ -95,7 +95,7 @@ This policy only applies to the Alt+Tab switcher. When the policy is not enabled
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Configure the inclusion of Edge tabs into Alt-Tab*
- GP Friendly name: *Configure the inclusion of Edge tabs into Alt-Tab*
- GP name: *BrowserAltTabBlowout*
- GP path: *Windows Components/Multitasking*
- GP ADMX file name: *Multitasking.admx*

14
windows/client-management/mdm/policy-csp-networkisolation.md
View File

@ -100,7 +100,7 @@ Contains a list of Enterprise resource domains hosted in the cloud that need to
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Enterprise resource domains hosted in the cloud*
- GP Friendly name: *Enterprise resource domains hosted in the cloud*
- GP name: *WF_NetIsolation_EnterpriseCloudResources*
- GP element: *WF_NetIsolation_EnterpriseCloudResourcesBox*
- GP path: *Network/Network Isolation*
@ -160,7 +160,7 @@ Sets the enterprise IP ranges that define the computers in the enterprise networ
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Private network ranges for apps*
- GP Friendly name: *Private network ranges for apps*
- GP name: *WF_NetIsolation_PrivateSubnet*
- GP element: *WF_NetIsolation_PrivateSubnetBox*
- GP path: *Network/Network Isolation*
@ -233,7 +233,7 @@ Integer value that tells the client to accept the configured list and not to use
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Subnet definitions are authoritative*
- GP Friendly name: *Subnet definitions are authoritative*
- GP name: *WF_NetIsolation_Authoritative_Subnet*
- GP path: *Network/Network Isolation*
- GP ADMX file name: *NetworkIsolation.admx*
@ -292,7 +292,7 @@ This is the comma-separated list of internal proxy servers. For example "157.54.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Intranet proxy servers for apps*
- GP Friendly name: *Intranet proxy servers for apps*
- GP name: *WF_NetIsolation_Intranet_Proxies*
- GP element: *WF_NetIsolation_Intranet_ProxiesBox*
- GP path: *Network/Network Isolation*
@ -413,7 +413,7 @@ This is a comma-separated list of proxy servers. Any server on this list is cons
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Internet proxy servers for apps*
- GP Friendly name: *Internet proxy servers for apps*
- GP name: *WF_NetIsolation_Domain_Proxies*
- GP element: *WF_NetIsolation_Domain_ProxiesBox*
- GP path: *Network/Network Isolation*
@ -473,7 +473,7 @@ Integer value that tells the client to accept the configured list of proxies and
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Proxy definitions are authoritative*
- GP Friendly name: *Proxy definitions are authoritative*
- GP name: *WF_NetIsolation_Authoritative_Proxies*
- GP path: *Network/Network Isolation*
- GP ADMX file name: *NetworkIsolation.admx*
@ -532,7 +532,7 @@ List of domain names that can used for work or personal resource.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Domains categorized as both work and personal*
- GP Friendly name: *Domains categorized as both work and personal*
- GP name: *WF_NetIsolation_NeutralResources*
- GP element: *WF_NetIsolation_NeutralResourcesBox*
- GP path: *Network/Network Isolation*

6
windows/client-management/mdm/policy-csp-notifications.md
View File

@ -96,7 +96,7 @@ No reboots or service restarts are required for this policy setting to take effe
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn off notifications network usage*
- GP Friendly name: *Turn off notifications network usage*
- GP name: *NoCloudNotification*
- GP path: *Start Menu and Taskbar/Notifications*
- GP ADMX file name: *WPN.admx*
@ -170,7 +170,7 @@ No reboot or service restart is required for this policy to take effect.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn off notification mirroring*
- GP Friendly name: *Turn off notification mirroring*
- GP name: *NoNotificationMirroring*
- GP path: *Start Menu and Taskbar/Notifications*
- GP ADMX file name: *WPN.admx*
@ -242,7 +242,7 @@ No reboots or service restarts are required for this policy setting to take effe
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn off tile notifications*
- GP Friendly name: *Turn off tile notifications*
- GP name: *NoTileNotification*
- GP path: *Start Menu and Taskbar/Notifications*
- GP ADMX file name: *WPN.admx*

44
windows/client-management/mdm/policy-csp-power.md
View File

@ -153,7 +153,7 @@ If you disable this policy setting, standby states (S1-S3) are not allowed.
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Allow standby states (S1-S3) when sleeping (on battery)*
- GP Friendly name: *Allow standby states (S1-S3) when sleeping (on battery)*
- GP name: *AllowStandbyStatesDC_2*
- GP path: *System/Power Management/Sleep Settings*
- GP ADMX file name: *power.admx*
@ -223,7 +223,7 @@ If you disable this policy setting, standby states (S1-S3) are not allowed.
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Allow standby states (S1-S3) when sleeping (plugged in)*
- GP Friendly name: *Allow standby states (S1-S3) when sleeping (plugged in)*
- GP name: *AllowStandbyStatesAC_2*
- GP path: *System/Power Management/Sleep Settings*
- GP ADMX file name: *power.admx*
@ -295,7 +295,7 @@ If the user has configured a slide show to run on the lock screen when the machi
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Turn off the display (on battery)*
- GP Friendly name: *Turn off the display (on battery)*
- GP name: *VideoPowerDownTimeOutDC_2*
- GP path: *System/Power Management/Video and Display Settings*
- GP ADMX file name: *power.admx*
@ -367,7 +367,7 @@ If the user has configured a slide show to run on the lock screen when the machi
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Turn off the display (plugged in)*
- GP Friendly name: *Turn off the display (plugged in)*
- GP name: *VideoPowerDownTimeOutAC_2*
- GP path: *System/Power Management/Video and Display Settings*
- GP ADMX file name: *power.admx*
@ -431,7 +431,7 @@ If you disable or do not configure this policy setting, users control this setti
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Energy Saver Battery Threshold (on battery)*
- GP Friendly name: *Energy Saver Battery Threshold (on battery)*
- GP name: *EsBattThresholdDC*
- GP element: *EnterEsBattThreshold*
- GP path: *System/Power Management/Energy Saver Settings*
@ -504,7 +504,7 @@ If you disable or do not configure this policy setting, users control this setti
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Energy Saver Battery Threshold (plugged in)*
- GP Friendly name: *Energy Saver Battery Threshold (plugged in)*
- GP name: *EsBattThresholdAC*
- GP element: *EnterEsBattThreshold*
- GP path: *System/Power Management/Energy Saver Settings*
@ -586,7 +586,7 @@ If the user has configured a slide show to run on the lock screen when the machi
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Specify the system hibernate timeout (on battery)*
- GP Friendly name: *Specify the system hibernate timeout (on battery)*
- GP name: *DCHibernateTimeOut_2*
- GP path: *System/Power Management/Sleep Settings*
- GP ADMX file name: *power.admx*
@ -658,7 +658,7 @@ If the user has configured a slide show to run on the lock screen when the machi
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Specify the system hibernate timeout (plugged in)*
- GP Friendly name: *Specify the system hibernate timeout (plugged in)*
- GP name: *ACHibernateTimeOut_2*
- GP path: *System/Power Management/Sleep Settings*
- GP ADMX file name: *power.admx*
@ -728,7 +728,7 @@ If you disable this policy setting, the user is not prompted for a password when
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Require a password when a computer wakes (on battery)*
- GP Friendly name: *Require a password when a computer wakes (on battery)*
- GP name: *DCPromptForPasswordOnResume_2*
- GP path: *System/Power Management/Sleep Settings*
- GP ADMX file name: *power.admx*
@ -798,7 +798,7 @@ If you disable this policy setting, the user is not prompted for a password when
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Require a password when a computer wakes (plugged in)*
- GP Friendly name: *Require a password when a computer wakes (plugged in)*
- GP name: *ACPromptForPasswordOnResume_2*
- GP path: *System/Power Management/Sleep Settings*
- GP ADMX file name: *power.admx*
@ -861,7 +861,7 @@ If you disable this policy setting or do not configure it, users can see and cha
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Select the lid switch action (on battery)*
- GP Friendly name: *Select the lid switch action (on battery)*
- GP name: *DCSystemLidAction_2*
- GP element: *SelectDCSystemLidAction*
- GP path: *System/Power Management/Button Settings*
@ -940,7 +940,7 @@ If you disable this policy setting or do not configure it, users can see and cha
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Select the lid switch action (plugged in)*
- GP Friendly name: *Select the lid switch action (plugged in)*
- GP name: *ACSystemLidAction_2*
- GP element: *SelectACSystemLidAction*
- GP path: *System/Power Management/Button Settings*
@ -1019,7 +1019,7 @@ If you disable this policy setting or do not configure it, users can see and cha
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Select the Power button action (on battery)*
- GP Friendly name: *Select the Power button action (on battery)*
- GP name: *DCPowerButtonAction_2*
- GP element: *SelectDCPowerButtonAction*
- GP path: *System/Power Management/Button Settings*
@ -1098,7 +1098,7 @@ If you disable this policy setting or do not configure it, users can see and cha
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Select the Power button action (plugged in)*
- GP Friendly name: *Select the Power button action (plugged in)*
- GP name: *ACPowerButtonAction_2*
- GP element: *SelectACPowerButtonAction*
- GP path: *System/Power Management/Button Settings*
@ -1177,7 +1177,7 @@ If you disable this policy setting or do not configure it, users can see and cha
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Select the Sleep button action (on battery)*
- GP Friendly name: *Select the Sleep button action (on battery)*
- GP name: *DCSleepButtonAction_2*
- GP element: *SelectDCSleepButtonAction*
- GP path: *System/Power Management/Button Settings*
@ -1256,7 +1256,7 @@ If you disable this policy setting or do not configure it, users can see and cha
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Select the Sleep button action (plugged in)*
- GP Friendly name: *Select the Sleep button action (plugged in)*
- GP name: *ACSleepButtonAction_2*
- GP element: *SelectACSleepButtonAction*
- GP path: *System/Power Management/Button Settings*
@ -1344,7 +1344,7 @@ If the user has configured a slide show to run on the lock screen when the machi
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Specify the system sleep timeout (on battery)*
- GP Friendly name: *Specify the system sleep timeout (on battery)*
- GP name: *DCStandbyTimeOut_2*
- GP path: *System/Power Management/Sleep Settings*
- GP ADMX file name: *power.admx*
@ -1416,7 +1416,7 @@ If the user has configured a slide show to run on the lock screen when the machi
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Specify the system sleep timeout (plugged in)*
- GP Friendly name: *Specify the system sleep timeout (plugged in)*
- GP name: *ACStandbyTimeOut_2*
- GP path: *System/Power Management/Sleep Settings*
- GP ADMX file name: *power.admx*
@ -1479,7 +1479,7 @@ If you set this policy setting to 1 or do not configure this policy setting, use
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn off hybrid sleep (on battery)*
- GP Friendly name: *Turn off hybrid sleep (on battery)*
- GP name: *DCStandbyWithHiberfileEnable_2*
- GP path: *System/Power Management/Sleep Settings*
- GP ADMX file name: *power.admx*
@ -1555,7 +1555,7 @@ If you set this policy setting to 1 or do not configure this policy setting, use
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Turn off hybrid sleep (plugged in)*
- GP Friendly name: *Turn off hybrid sleep (plugged in)*
- GP name: *ACStandbyWithHiberfileEnable_2*
- GP path: *System/Power Management/Sleep Settings*
- GP ADMX file name: *power.admx*
@ -1633,7 +1633,7 @@ If the user has configured a slide show to run on the lock screen when the machi
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Specify the unattended sleep timeout (on battery)*
- GP Friendly name: *Specify the unattended sleep timeout (on battery)*
- GP name: *UnattendedSleepTimeOutDC*
- GP element: *EnterUnattendedSleepTimeOut*
- GP path: *System/Power Management/Sleep Settings*
@ -1709,7 +1709,7 @@ If the user has configured a slide show to run on the lock screen when the machi
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Specify the unattended sleep timeout (plugged in)*
- GP Friendly name: *Specify the unattended sleep timeout (plugged in)*
- GP name: *UnattendedSleepTimeOutAC*
- GP element: *EnterUnattendedSleepTimeOut*
- GP path: *System/Power Management/Sleep Settings*

6
windows/client-management/mdm/policy-csp-printers.md
View File

@ -109,7 +109,7 @@ If you disable this policy setting:
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Point and Print Restrictions*
- GP Friendly name: *Point and Print Restrictions*
- GP name: *PointAndPrint_Restrictions_Win7*
- GP path: *Printers*
- GP ADMX file name: *Printing.admx*
@ -204,7 +204,7 @@ If you disable this policy setting:
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Point and Print Restrictions*
- GP Friendly name: *Point and Print Restrictions*
- GP name: *PointAndPrint_Restrictions*
- GP path: *Control Panel/Printers*
- GP ADMX file name: *Printing.admx*
@ -276,7 +276,7 @@ Note: This settings takes priority over the setting "Automatically publish new p
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Allow printers to be published*
- GP Friendly name: *Allow printers to be published*
- GP name: *PublishPrinters*
- GP path: *Printers*
- GP ADMX file name: *Printing2.admx*

8
windows/client-management/mdm/policy-csp-start.md
View File

@ -756,7 +756,7 @@ Enabling this policy prevents context menus from being invoked in the Start Menu
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Disable context menus in the Start Menu*
- GP Friendly name: *Disable context menus in the Start Menu*
- GP name: *DisableContextMenusInStart*
- GP path: *Start Menu and Taskbar*
- GP ADMX file name: *StartMenu.admx*
@ -1242,7 +1242,7 @@ Value type is integer.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Remove the People Bar from the taskbar*
- GP Friendly name: *Remove the People Bar from the taskbar*
- GP name: *HidePeopleBar*
- GP path: *Start Menu and Taskbar*
- GP ADMX file name: *StartMenu.admx*
@ -1454,7 +1454,7 @@ Added in Windows 10, version 1703. Allows IT Admins to configure Start by hidin
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Remove "Recently added" list from Start Menu*
- GP Friendly name: *Remove "Recently added" list from Start Menu*
- GP name: *HideRecentlyAddedApps*
- GP path: *Start Menu and Taskbar*
- GP ADMX file name: *StartMenu.admx*
@ -2083,7 +2083,7 @@ For further details on how to customize the Start layout, please see [Customize
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Start Layout*
- GP Friendly name: *Start Layout*
- GP name: *LockedStartLayout*
- GP path: *Start Menu and Taskbar*
- GP ADMX file name: *StartMenu.admx*

18
windows/client-management/mdm/policy-csp-storage.md
View File

@ -105,7 +105,7 @@ Value type is integer.
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Allow downloading updates to the Disk Failure Prediction Model*
- GP Friendly name: *Allow downloading updates to the Disk Failure Prediction Model*
- GP name: *SH_AllowDiskHealthModelUpdates*
- GP path: *System/Storage Health*
- GP ADMX file name: *StorageHealth.admx*
@ -176,7 +176,7 @@ If you do not configure this policy setting, Storage Sense is turned off by defa
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Allow Storage Sense*
- GP Friendly name: *Allow Storage Sense*
- GP name: *SS_AllowStorageSenseGlobal*
- GP path: *System/Storage Sense*
- GP ADMX file name: *StorageSense.admx*
@ -252,7 +252,7 @@ If you do not configure this policy setting, Storage Sense will delete the user
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Allow Storage Sense Temporary Files cleanup*
- GP Friendly name: *Allow Storage Sense Temporary Files cleanup*
- GP name: *SS_AllowStorageSenseTemporaryFilesCleanup*
- GP path: *System/Storage Sense*
- GP ADMX file name: *StorageSense.admx*
@ -328,7 +328,7 @@ If you disable or do not configure this policy setting, then Storage Sense will
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Configure Storage Sense Cloud Content dehydration threshold*
- GP Friendly name: *Configure Storage Sense Cloud Content dehydration threshold*
- GP name: *SS_ConfigStorageSenseCloudContentDehydrationThreshold*
- GP path: *System/Storage Sense*
- GP ADMX file name: *StorageSense.admx*
@ -404,7 +404,7 @@ If you disable or do not configure this policy setting, then Storage Sense will
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Configure Storage Storage Downloads cleanup threshold*
- GP Friendly name: *Configure Storage Storage Downloads cleanup threshold*
- GP name: *SS_ConfigStorageSenseDownloadsCleanupThreshold*
- GP path: *System/Storage Sense*
- GP ADMX file name: *StorageSense.admx*
@ -486,7 +486,7 @@ If you do not configure this policy setting, then the Storage Sense cadence is s
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Configure Storage Sense cadence*
- GP Friendly name: *Configure Storage Sense cadence*
- GP name: *SS_ConfigStorageSenseGlobalCadence*
- GP path: *System/Storage Sense*
- GP ADMX file name: *StorageSense.admx*
@ -562,7 +562,7 @@ If you disable or do not configure this policy setting, Storage Sense will delet
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Configure Storage Sense Recycle Bin cleanup threshold*
- GP Friendly name: *Configure Storage Sense Recycle Bin cleanup threshold*
- GP name: *SS_ConfigStorageSenseRecycleBinCleanupThreshold*
- GP path: *System/Storage Sense*
- GP ADMX file name: *StorageSense.admx*
@ -641,7 +641,7 @@ If you disable or do not configure this policy setting, Windows will activate un
<!--ADMXBacked-->
ADMX Info:
- GP English name: *Do not allow Windows to activate Enhanced Storage devices*
- GP Friendly name: *Do not allow Windows to activate Enhanced Storage devices*
- GP name: *TCGSecurityActivationDisabled*
- GP path: *System/Enhanced Storage Access*
- GP ADMX file name: *enhancedstorage.admx*
@ -707,7 +707,7 @@ Supported values:
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Removable Disks: Deny write access*
- GP Friendly name: *Removable Disks: Deny write access*
- GP name: *RemovableDisks_DenyWrite_Access_2*
- GP element: *RemovableDisks_DenyWrite_Access_2*
- GP path: *System/Removable Storage Access*

2
windows/client-management/mdm/policy-csp-system.md
View File

@ -158,7 +158,7 @@ If you enable or do not configure this policy setting, users can download and in
<!--/Description-->
<!--ADMXMapped-->
ADMX Info:
- GP English name: *Toggle user control over Insider builds*
- GP Friendly name: *Toggle user control over Insider builds*
- GP name: *AllowBuildPreview*
- GP path: *Data Collection and Preview Builds*
- GP ADMX file name: *AllowBuildPreview.admx*