deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 13:27:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity
windows-itpro-docs/windows/client-management/mdm/policy-csp-settings.md
Liz Long b307aea55a meta client management 7
2022-10-24 18:56:09 -04:00

16 KiB
Raw Blame History

title, description, ms.author, ms.topic, ms.prod, ms.technology, author, ms.localizationpriority, ms.date, ms.reviewer, manager
title description ms.author ms.topic ms.prod ms.technology author ms.localizationpriority ms.date ms.reviewer manager
Policy CSP - Settings Learn how to use the Policy CSP - Settings setting so that you can allow the user to change Auto Play settings. vinpa article windows-client itpro-manage vinaypamnani-msft medium 09/27/2019 aaroncz

Policy CSP - Settings

Settings policies

Settings/AllowAutoPlay
Settings/AllowDataSense
Settings/AllowDateTime
Settings/AllowEditDeviceName
Settings/AllowLanguage
Settings/AllowOnlineTips
Settings/AllowPowerSleep
Settings/AllowRegion
Settings/AllowSignInOptions
Settings/AllowVPN
Settings/AllowWorkplace
Settings/AllowYourAccount
Settings/ConfigureTaskbarCalendar
Settings/PageVisibilityList

Settings/AllowAutoPlay

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows the user to change Auto Play settings.

Note

Setting this policy to 0 (Not allowed) does not affect the autoplay dialog box that appears when a device is connected.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/AllowDataSense

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows the user to change Data Sense settings.

Note

The AllowDataSense policy is not supported on Windows 10, version 2004 and later.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/AllowDateTime

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows the user to change date and time settings.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/AllowEditDeviceName

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

This policy disables edit device name option on Settings.

Describes what values are supported in/by this policy and meaning of each value, and default value.

Settings/AllowLanguage

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows the user to change the language settings.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/AllowOnlineTips

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Enables or disables the retrieval of online tips and help for the Settings app.

If disabled, Settings won't contact Microsoft content services to retrieve tips and help content.

ADMX Info:

  • GP Friendly name: Allow Online Tips
  • GP name: AllowOnlineTips
  • GP element: CheckBox_AllowOnlineTips
  • GP path: Control Panel
  • GP ADMX file name: ControlPanel.admx

Settings/AllowPowerSleep

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows the user to change power and sleep settings.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/AllowRegion

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows the user to change the region settings.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/AllowSignInOptions

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows the user to change sign in options.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/AllowVPN

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows the user to change VPN settings.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/AllowWorkplace

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows user to change workplace settings.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/AllowYourAccount

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows user to change account settings.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/ConfigureTaskbarCalendar

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • User

Allows IT Admins to configure the default setting for showing more calendars (besides the default calendar for the locale) in the taskbar clock and calendar flyout. Other supported calendars are: Simplified or Traditional Chinese lunar calendar. Turning on one of these calendars will display Chinese lunar dates below the default calendar for the locale. Select "Don't show additional calendars" to prevent showing other calendars besides the default calendar for the locale.

ADMX Info:

  • GP Friendly name: Show additional calendar
  • GP name: ConfigureTaskbarCalendar
  • GP path: Start Menu and Taskbar
  • GP ADMX file name: Taskbar.admx

The following list shows the supported values:

  • 0 (default) – User will be allowed to configure the setting.
  • 1 – Don't show more calendars.
  • 2 - Simplified Chinese (Lunar).
  • 3 - Traditional Chinese (Lunar).

Settings/PageVisibilityList

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • User
  • Device

Allows IT Admins to either:

  • Prevent specific pages in the System Settings app from being visible or accessible.

    OR

  • To do so for all pages except the pages you enter.

The mode will be specified by the policy string beginning with either the string showonly: or hide:. Pages are identified by a shortened version of their already published URIs, which is the URI minus the "ms-settings:" prefix.

For example, if the URI for a settings page is "ms-settings:bluetooth", the page identifier used in the policy will be just "bluetooth". Multiple page identifiers are separated by semicolons. For more information on the URI reference scheme used for the various pages of the System Settings app, see ms-settings: URI scheme reference.

The following example shows a policy that allows access only to the about and bluetooth pages, which have URI "ms-settings:about" and "ms-settings:bluetooth" respectively:

showonly:about;bluetooth

If the policy isn't specified, then the behavior is that no pages are affected. If the policy string is formatted incorrectly, then it's ignored (that is, treated as not set). It's ignored to prevent the machine from becoming unserviceable, if data corruption occurs. If a page is already hidden for another reason, then it stays hidden, even if the page is in a showonly: list.

The format of the PageVisibilityList value is as follows:

  • The value is a unicode string up to 10,000 characters long, which will be used without case sensitivity.
  • There are two variants: one that shows only the given pages and one that hides the given pages.
  • The first variant starts with the string showonly: and the second with the string "hide:".
  • Following the variant identifier is a semicolon-delimited list of page identifiers, which must not have any extra whitespace.
  • Each page identifier is the ms-settings:xyz URI for the page, minus the ms-settings: prefix. So the identifier for the page with the ms-settings:network-wifi URI would be network-wifi.

The default value for this setting is an empty string, which is interpreted as show everything.

Example 1: Only the wifi and bluetooth pages should be shown. They have URIs ms-settings:network-wifi and ms-settings:bluetooth. All other pages (and the categories they're in) will be hidden:

showonly:network-wifi;bluetooth

Example 2: The wifi page shouldn't be shown:

hide:network-wifi

ADMX Info:

  • GP Friendly name: Settings Page Visibility
  • GP name: SettingsPageVisibility
  • GP element: SettingsPageVisibilityBox
  • GP path: Control Panel
  • GP ADMX file name: ControlPanel.admx

To validate on Desktop, use the following steps:

  1. Open System Settings and verify that the About page is visible and accessible.
  2. Configure the policy with the following string: "hide:about".
  3. Open System Settings again and verify that the About page is no longer accessible.

Related topics

Policy configuration service provider