16 KiB
title, description, author, manager, ms.author, ms.date, ms.localizationpriority, ms.prod, ms.technology, ms.topic
| title | description | author | manager | ms.author | ms.date | ms.localizationpriority | ms.prod | ms.technology | ms.topic |
|---|---|---|---|---|---|---|---|---|---|
| FileExplorer Policy CSP | Learn more about the FileExplorer Area in Policy CSP. | vinaypamnani-msft | aaroncz | vinpa | 05/10/2023 | medium | windows-client | itpro-manage | reference |
Policy CSP - FileExplorer
[!INCLUDE ADMX-backed CSP tip]
AllowOptionToShowNetwork
| Scope | Editions | Applicable OS |
|---|---|---|
| ✅ Device ✅ User |
✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE |
✅ Windows 11, version 21H2 [10.0.22000] and later |
./User/Vendor/MSFT/Policy/Config/FileExplorer/AllowOptionToShowNetwork
./Device/Vendor/MSFT/Policy/Config/FileExplorer/AllowOptionToShowNetwork
When the Network folder is restricted, give the user the option to enumerate and navigate into it.
Description framework properties:
| Property name | Property value |
|---|---|
| Format | int |
| Access Type | Add, Delete, Get, Replace |
| Default Value | 0 |
Allowed values:
| Value | Description |
|---|---|
| 0 (Default) | Not Allowed. |
| 1 | Allowed. |
AllowOptionToShowThisPC
| Scope | Editions | Applicable OS |
|---|---|---|
| ✅ Device ✅ User |
✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE |
✅ Windows 11, version 21H2 [10.0.22000] and later |
./User/Vendor/MSFT/Policy/Config/FileExplorer/AllowOptionToShowThisPC
./Device/Vendor/MSFT/Policy/Config/FileExplorer/AllowOptionToShowThisPC
When This PC location is restricted, give the user the option to enumerate and navigate into it.
Description framework properties:
| Property name | Property value |
|---|---|
| Format | int |
| Access Type | Add, Delete, Get, Replace |
| Default Value | 0 |
Allowed values:
| Value | Description |
|---|---|
| 0 (Default) | Not Allowed. |
| 1 | Allowed. |
DisableGraphRecentItems
| Scope | Editions | Applicable OS |
|---|---|---|
| ✅ Device ❌ User |
✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE |
✅ Windows 11, version 22H2 [10.0.22621] and later |
./Device/Vendor/MSFT/Policy/Config/FileExplorer/DisableGraphRecentItems
Turning off files from Office.com will prevent File Explorer from requesting recent cloud file metadata and displaying it in the Quick access view.
Description framework properties:
| Property name | Property value |
|---|---|
| Format | int |
| Access Type | Add, Delete, Get, Replace |
| Default Value | 0 |
Allowed values:
| Value | Description |
|---|---|
| 0 (Default) | File Explorer will request cloud file metadata and display it in the Quick access view. |
| 1 | File Explorer won't request cloud file metadata or display it in the Quick access view. |
Group policy mapping:
| Name | Value |
|---|---|
| Name | DisableGraphRecentItems |
| Friendly Name | Turn off files from Office.com in Quick access view |
| Location | Computer Configuration |
| Path | WindowsComponents > File Explorer |
| Registry Key Name | Software\Policies\Microsoft\Windows\Explorer |
| Registry Value Name | DisableGraphRecentItems |
| ADMX File Name | Explorer.admx |
SetAllowedFolderLocations
| Scope | Editions | Applicable OS |
|---|---|---|
| ✅ Device ✅ User |
✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE |
✅ Windows 11, version 21H2 [10.0.22000] and later |
./User/Vendor/MSFT/Policy/Config/FileExplorer/SetAllowedFolderLocations
./Device/Vendor/MSFT/Policy/Config/FileExplorer/SetAllowedFolderLocations
A value that can represent one or more folder locations in File Explorer. If not specified, the default is access to all folder locations.
Description framework properties:
| Property name | Property value |
|---|---|
| Format | int |
| Access Type | Add, Delete, Get, Replace |
| Default Value | 0 |
Allowed values:
| Value | Description |
|---|---|
| 0 (Default) | Access to all folder locations. |
| 13 | Documents, Pictures, Downloads. |
| 15 | Desktop, Documents, Pictures, Downloads. |
| 31 | Desktop, Documents, Pictures, Downloads, Network. |
| 47 | This PC, Desktop, Documents, Pictures, Downloads. |
| 63 | This PC, Desktop, Documents, Pictures, Downloads, Network. |
SetAllowedStorageLocations
| Scope | Editions | Applicable OS |
|---|---|---|
| ✅ Device ✅ User |
✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE |
✅ Windows 11, version 21H2 [10.0.22000] and later |
./User/Vendor/MSFT/Policy/Config/FileExplorer/SetAllowedStorageLocations
./Device/Vendor/MSFT/Policy/Config/FileExplorer/SetAllowedStorageLocations
A value that can represent one or more storage locations in File Explorer. If not specified, the default is access to all storage locations.
Description framework properties:
| Property name | Property value |
|---|---|
| Format | int |
| Access Type | Add, Delete, Get, Replace |
| Default Value | 0 |
Allowed values:
| Value | Description |
|---|---|
| 0 (Default) | Access to all storage locations. |
| 1 | Removable Drives. |
| 2 | Sync roots. |
| 3 | Removable Drives, Sync roots. |
| 4 | Local Drives. |
| 5 | Removable Drives, Local Drives. |
| 6 | Sync Roots, Local Drives. |
| 7 | Removable Drives, Sync Roots, Local Drives. |
TurnOffDataExecutionPreventionForExplorer
| Scope | Editions | Applicable OS |
|---|---|---|
| ✅ Device ❌ User |
✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE |
✅ Windows 10, version 1803 [10.0.17134] and later |
./Device/Vendor/MSFT/Policy/Config/FileExplorer/TurnOffDataExecutionPreventionForExplorer
Disabling data execution prevention can allow certain legacy plug-in applications to function without terminating Explorer.
Description framework properties:
| Property name | Property value |
|---|---|
| Format | chr (string) |
| Access Type | Add, Delete, Get, Replace |
[!INCLUDE ADMX-backed policy note]
ADMX mapping:
| Name | Value |
|---|---|
| Name | NoDataExecutionPrevention |
| Friendly Name | Turn off Data Execution Prevention for Explorer |
| Location | Computer Configuration |
| Path | WindowsComponents > File Explorer |
| Registry Key Name | Software\Policies\Microsoft\Windows\Explorer |
| Registry Value Name | NoDataExecutionPrevention |
| ADMX File Name | Explorer.admx |
TurnOffHeapTerminationOnCorruption
| Scope | Editions | Applicable OS |
|---|---|---|
| ✅ Device ❌ User |
✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE |
✅ Windows 10, version 1803 [10.0.17134] and later |
./Device/Vendor/MSFT/Policy/Config/FileExplorer/TurnOffHeapTerminationOnCorruption
Disabling heap termination on corruption can allow certain legacy plug-in applications to function without terminating Explorer immediately, although Explorer may still terminate unexpectedly later.
Description framework properties:
| Property name | Property value |
|---|---|
| Format | chr (string) |
| Access Type | Add, Delete, Get, Replace |
[!INCLUDE ADMX-backed policy note]
ADMX mapping:
| Name | Value |
|---|---|
| Name | NoHeapTerminationOnCorruption |
| Friendly Name | Turn off heap termination on corruption |
| Location | Computer Configuration |
| Path | WindowsComponents > File Explorer |
| Registry Key Name | Software\Policies\Microsoft\Windows\Explorer |
| Registry Value Name | NoHeapTerminationOnCorruption |
| ADMX File Name | Explorer.admx |