mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 13:27:23 +00:00

Nicholas Brower 672bdc1c11 Merged PR 2757: fixing incorrect policy names, and deleting one that was never implemented

fixing incorrect policy names, and deleting one that was never implemented

2017-08-17 19:12:50 +00:00

252 KiB

Raw Blame History

title, description, ms.assetid, ms.author, ms.topic, ms.prod, ms.technology, author, ms.date

title	description	ms.assetid	ms.author	ms.topic	ms.prod	ms.technology	author	ms.date
Policy CSP	Policy CSP	4F3A1134-D401-44FC-A583-6EDD3070BA4F	maricia	article	w10	windows	nickbrower	08/14/2017

Policy CSP

Warning

Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.

The Policy configuration service provider enables the enterprise to configure policies on Windows 10. Use this configuration service provider to configure any company policies.

The Policy configuration service provider has the following sub-categories:

Policy/Config/AreaName – Handles the policy configuration request from the server.
Policy/Result/AreaName – Provides a read-only path to policies enforced on the device.

The following diagram shows the Policy configuration service provider in tree format as used by both Open Mobile Alliance Device Management (OMA DM) and OMA Client Provisioning.

./Vendor/MSFT/Policy

The root node for the Policy configuration service provider.

Supported operation is Get.

Policy/Config

Node for grouping all policies configured by one source. The configuration source can use this path to set policy values and later query any policy value that it previously set. One policy can be configured by multiple configuration sources. If a configuration source wants to query the result of conflict resolution (for example, if Exchange and MDM both attempt to set a value,) the configuration source can use the Policy/Result path to retrieve the resulting value.

Supported operation is Get.

Policy/Config/****AreaName

The area group that can be configured by a single technology for a single provider. Once added, you cannot change the value.

Supported operations are Add, Get, and Delete.

Policy/Config/****AreaName/PolicyName

Specifies the name/value pair used in the policy.

The following list shows some tips to help you when configuring policies:

Separate substring values by the Unicode  in the XML file.

Note

A query from a different caller could provide a different value as each caller could have different values for a named policy.

In SyncML, wrap this policy with the Atomic command so that the policy settings are treated as a single transaction.
Supported operations are Add, Get, Delete, and Replace.
Value type is string.

Policy/Result

Groups the evaluated policies from all providers that can be configured.

Supported operation is Get.

Policy/Result/****AreaName

The area group that can be configured by a single technology independent of the providers.

Supported operation is Get.

Policy/Result/****AreaName/PolicyName

Specifies the name/value pair used in the policy.

Supported operation is Get.

Policy/ConfigOperations

Added in Windows 10, version 1703. The root node for grouping different configuration operations.

Supported operations are Add, Get, and Delete.

Policy/ConfigOperations/ADMXInstall

Added in Windows 10, version 1703. Allows settings for ADMX files for Win32 and Desktop Bridge apps to be imported (ingested) by your device and processed into new ADMX-backed policies or preferences. By using ADMXInstall, you can add ADMX-backed polices for those Win32 or Desktop Bridge apps that have been added between OS releases. ADMX-backed policies are ingested to your device by using the Policy CSP URI: `./Vendor/MSFT/Policy/ConfigOperations/ADMXInstall`. Each ADMX-backed policy or preference that is added is assigned a unique ID. For more information about using Policy CSP to configure Win32 and Desktop Bridge app policies, see [Win32 and Desktop Bridge app policy configuration](win32-and-centennial-app-policy-configuration.md).

Note

The OPAX settings that are managed by the Microsoft Office Customization Tool are not supported by MDM. For more information about this tool, see Office Customization Tool.

ADMX files that have been installed by using **ConfigOperations/ADMXInstall** can later be deleted by using the URI delete operation. Deleting an ADMX file will delete the ADMX file from disk, remove the metadata from the ADMXdefault registry hive, and delete all the policies that were set from the file. The MDM server can also delete all ADMX policies that are tied to a particular app by calling delete on the URI, `./Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/{AppName}`.

252 KiB Raw Blame History Unescape Escape

Policy CSP

Policies

AboveLock policies

Accounts policies

ActiveXControls policies

ApplicationDefaults policies

ApplicationManagement policies

AppVirtualization policies

AttachmentManager policies

Authentication policies

Autoplay policies

Bitlocker policies

Bluetooth policies

Browser policies

Camera policies

Cellular policies

Connectivity policies

CredentialProviders policies

CredentialsUI policies

Cryptography policies

DataProtection policies

DataUsage policies

Defender policies

DeliveryOptimization policies

Desktop policies

DeviceGuard policies

DeviceInstallation policies

DeviceLock policies

Display policies

Education policies

EnterpriseCloudPrint policies

ErrorReporting policies

EventLogService policies

Experience policies

ExploitGuard policies

Games policies

InternetExplorer policies

Kerberos policies

Licensing policies

LocalPoliciesSecurityOptions policies

Location policies

LockDown policies

Maps policies

Messaging policies

NetworkIsolation policies

Notifications policies

Power policies

Printers policies

Privacy policies

RemoteAssistance policies

RemoteDesktopServices policies

RemoteManagement policies

RemoteProcedureCall policies

RemoteShell policies

Search policies

Security policies

Settings policies

SmartScreen policies

Speech policies

Start policies

Storage policies

System policies

TextInput policies

TimeLanguageSettings policies

Update policies

Wifi policies

WindowsDefenderSecurityCenter policies

WindowsInkWorkspace policies

WindowsLogon policies

WirelessDisplay policies

ADMX-backed policies

Policies supported by IoT Core

Policies supported by Windows Holographic for Business

Policies supported by Microsoft Surface Hub

Policies that can be set using Exchange Active Sync (EAS)

Examples

Related topics

252 KiB

Raw Blame History