windows-itpro-docs/windows/client-management/mdm/policy-csp-fileexplorer.md

17 KiB

title, description, author, manager, ms.author, ms.date, ms.localizationpriority, ms.prod, ms.technology, ms.topic
title description author manager ms.author ms.date ms.localizationpriority ms.prod ms.technology ms.topic
FileExplorer Policy CSP Learn more about the FileExplorer Area in Policy CSP vinaypamnani-msft aaroncz vinpa 12/30/2022 medium windows-client itpro-manage reference

Policy CSP - FileExplorer

Tip

Some of these are ADMX-backed policies and require a special SyncML format to enable or disable. For details, see Understanding ADMX-backed policies.

You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to Enabling a policy.

The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see CDATA Sections.

AllowOptionToShowNetwork

Scope Editions Applicable OS
✔️ Device
✔️ User
Home
✔️ Pro
✔️ Enterprise
✔️ Education
✔️ Windows SE
✔️ Windows 11, version 21H2 [10.0.22000] and later
./User/Vendor/MSFT/Policy/Config/FileExplorer/AllowOptionToShowNetwork
./Device/Vendor/MSFT/Policy/Config/FileExplorer/AllowOptionToShowNetwork

When the Network folder is restricted, give the user the option to enumerate and navigate into it.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Not Allowed.
1 Allowed.

AllowOptionToShowThisPC

Scope Editions Applicable OS
✔️ Device
✔️ User
Home
✔️ Pro
✔️ Enterprise
✔️ Education
✔️ Windows SE
✔️ Windows 11, version 21H2 [10.0.22000] and later
./User/Vendor/MSFT/Policy/Config/FileExplorer/AllowOptionToShowThisPC
./Device/Vendor/MSFT/Policy/Config/FileExplorer/AllowOptionToShowThisPC

When This PC location is restricted, give the user the option to enumerate and navigate into it.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Not Allowed.
1 Allowed.

DisableGraphRecentItems

Scope Editions Applicable OS
✔️ Device
User
Home
✔️ Pro
✔️ Enterprise
✔️ Education
✔️ Windows SE
✔️ Windows 11, version 22H2 [10.0.22621] and later
./Device/Vendor/MSFT/Policy/Config/FileExplorer/DisableGraphRecentItems

Turning off files from Office.com will prevent File Explorer from requesting recent cloud file metadata and displaying it in the Quick access view.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) File Explorer will request cloud file metadata and display it in the Quick access view.
1 File Explorer will not request cloud file metadata or display it in the Quick access view.

Group policy mapping:

Name Value
Name DisableGraphRecentItems
Friendly Name Turn off files from Office.com in Quick access view
Location Computer Configuration
Path WindowsComponents > File Explorer
Registry Key Name Software\Policies\Microsoft\Windows\Explorer
Registry Value Name DisableGraphRecentItems
ADMX File Name Explorer.admx

SetAllowedFolderLocations

Scope Editions Applicable OS
✔️ Device
✔️ User
Home
✔️ Pro
✔️ Enterprise
✔️ Education
✔️ Windows SE
✔️ Windows 11, version 21H2 [10.0.22000] and later
./User/Vendor/MSFT/Policy/Config/FileExplorer/SetAllowedFolderLocations
./Device/Vendor/MSFT/Policy/Config/FileExplorer/SetAllowedFolderLocations

A value that can represent one or more folder locations in File Explorer. If not specified, the default is access to all folder locations.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Access to all folder locations.
13 Documents, Pictures, Downloads
15 Desktop, Documents, Pictures, Downloads
31 Desktop, Documents, Pictures, Downloads, Network
47 This PC, Desktop, Documents, Pictures, Downloads
63 This PC, Desktop, Documents, Pictures, Downloads, Network

SetAllowedStorageLocations

Scope Editions Applicable OS
✔️ Device
✔️ User
Home
✔️ Pro
✔️ Enterprise
✔️ Education
✔️ Windows SE
✔️ Windows 11, version 21H2 [10.0.22000] and later
./User/Vendor/MSFT/Policy/Config/FileExplorer/SetAllowedStorageLocations
./Device/Vendor/MSFT/Policy/Config/FileExplorer/SetAllowedStorageLocations

A value that can represent one or more storage locations in File Explorer. If not specified, the default is access to all storage locations.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Access to all storage locations.
1 Removable Drives
2 Sync roots
3 Removable Drives, Sync roots
4 Local Drives
5 Removable Drives, Local Drives
6 Sync Roots, Local Drives
7 Removable Drives, Sync Roots, Local Drives

TurnOffDataExecutionPreventionForExplorer

Scope Editions Applicable OS
✔️ Device
User
Home
✔️ Pro
✔️ Enterprise
✔️ Education
✔️ Windows SE
✔️ Windows 10, version 1803 [10.0.17134] and later
./Device/Vendor/MSFT/Policy/Config/FileExplorer/TurnOffDataExecutionPreventionForExplorer

Disabling data execution prevention can allow certain legacy plug-in applications to function without terminating Explorer.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get, Replace

Tip

This is an ADMX-backed policy and requires SyncML format for configuration. For details, see Understanding ADMX-backed policies.

ADMX mapping:

Name Value
Name NoDataExecutionPrevention
Friendly Name Turn off Data Execution Prevention for Explorer
Location Computer Configuration
Path WindowsComponents > File Explorer
Registry Key Name Software\Policies\Microsoft\Windows\Explorer
Registry Value Name NoDataExecutionPrevention
ADMX File Name Explorer.admx

TurnOffHeapTerminationOnCorruption

Scope Editions Applicable OS
✔️ Device
User
Home
✔️ Pro
✔️ Enterprise
✔️ Education
✔️ Windows SE
✔️ Windows 10, version 1803 [10.0.17134] and later
./Device/Vendor/MSFT/Policy/Config/FileExplorer/TurnOffHeapTerminationOnCorruption

Disabling heap termination on corruption can allow certain legacy plug-in applications to function without terminating Explorer immediately, although Explorer may still terminate unexpectedly later.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get, Replace

Tip

This is an ADMX-backed policy and requires SyncML format for configuration. For details, see Understanding ADMX-backed policies.

ADMX mapping:

Name Value
Name NoHeapTerminationOnCorruption
Friendly Name Turn off heap termination on corruption
Location Computer Configuration
Path WindowsComponents > File Explorer
Registry Key Name Software\Policies\Microsoft\Windows\Explorer
Registry Value Name NoHeapTerminationOnCorruption
ADMX File Name Explorer.admx

Policy configuration service provider