18 KiB
Raw Blame History

title, description, ms.author, ms.topic, ms.prod, ms.technology, author, ms.localizationpriority, ms.date, ms.reviewer, manager
title description ms.author ms.topic ms.prod ms.technology author ms.localizationpriority ms.date ms.reviewer manager
Policy CSP - Settings Learn how to use the Policy CSP - Settings setting so that you can allow the user to change Auto Play settings. dansimp article w10 windows manikadhiman medium 09/27/2019 dansimp

Policy CSP - Settings


Settings policies

Settings/AllowAutoPlay
Settings/AllowDataSense
Settings/AllowDateTime
Settings/AllowLanguage
Settings/AllowOnlineTips
Settings/AllowPowerSleep
Settings/AllowRegion
Settings/AllowSignInOptions
Settings/AllowVPN
Settings/AllowWorkplace
Settings/AllowYourAccount
Settings/ConfigureTaskbarCalendar
Settings/PageVisibilityList

Settings/AllowAutoPlay

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Note

 This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

Allows the user to change Auto Play settings.

Note

 Setting this policy to 0 (Not allowed) does not affect the autoplay dialog box that appears when a device is connected.

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Settings/AllowDataSense

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows the user to change Data Sense settings.

Note

 The AllowDataSense policy is not supported on Windows 10, version 2004 and later.

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Settings/AllowDateTime

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows the user to change date and time settings.

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Settings/AllowLanguage

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Note

 This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

Allows the user to change the language settings.

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Settings/AllowOnlineTips

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Enables or disables the retrieval of online tips and help for the Settings app.

If disabled, Settings will not contact Microsoft content services to retrieve tips and help content.

ADMX Info:

  • GP Friendly name: Allow Online Tips
  • GP name: AllowOnlineTips
  • GP element: CheckBox_AllowOnlineTips
  • GP path: Control Panel
  • GP ADMX file name: ControlPanel.admx

Settings/AllowPowerSleep

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Note

 This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

Allows the user to change power and sleep settings.

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Settings/AllowRegion

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Note

 This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

Allows the user to change the region settings.

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Settings/AllowSignInOptions

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Note

 This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

Allows the user to change sign-in options.

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Settings/AllowVPN

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows the user to change VPN settings.

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Settings/AllowWorkplace

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Note

 This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

Allows user to change workplace settings.

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Settings/AllowYourAccount

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows user to change account settings.

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Settings/ConfigureTaskbarCalendar

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • User

Allows IT Admins to configure the default setting for showing additional calendars (besides the default calendar for the locale) in the taskbar clock and calendar flyout. In this version of Windows 10, supported additional calendars are: Simplified or Traditional Chinese lunar calendar. Turning on one of these calendars will display Chinese lunar dates below the default calendar for the locale. Select "Don't show additional calendars" to prevent showing other calendars besides the default calendar for the locale.

ADMX Info:

  • GP Friendly name: Show additional calendar
  • GP name: ConfigureTaskbarCalendar
  • GP path: Start Menu and Taskbar
  • GP ADMX file name: Taskbar.admx

The following list shows the supported values:

  • 0 (default) User will be allowed to configure the setting.
  • 1 Don't show additional calendars.
  • 2 - Simplified Chinese (Lunar).
  • 3 - Traditional Chinese (Lunar).

Settings/PageVisibilityList

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • User
  • Device

Allows IT Admins to either prevent specific pages in the System Settings app from being visible or accessible, or to do so for all pages except those specified. The mode will be specified by the policy string beginning with either the string "showonly:" or "hide:".  Pages are identified by a shortened version of their already published URIs, which is the URI minus the "ms-settings:" prefix. For example, if the URI for a settings page is "ms-settings:bluetooth", the page identifier used in the policy will be just "bluetooth". Multiple page identifiers are separated by semicolons. For additional information on the URI reference scheme used for the various pages of the System Settings app, see ms-settings: URI scheme reference.

The following example illustrates a policy that would allow access only to the about and bluetooth pages, which have URI "ms-settings:about" and "ms-settings:bluetooth" respectively:

showonly:about;bluetooth

If the policy is not specified, the behavior will be that no pages are affected. If the policy string is formatted incorrectly, it will be ignored entirely (that is, treated as not set) to prevent the machine from becoming unserviceable if data corruption occurs. Note that if a page is already hidden for another reason, then it will remain hidden even if it is in a "showonly:" list.

The format of the PageVisibilityList value is as follows:

  • The value is a unicode string up to 10,000 characters long, which will be used without case sensitivity.
  • There are two variants: one that shows only the given pages and one that hides the given pages.
  • The first variant starts with the string "showonly:" and the second with the string "hide:".
  • Following the variant identifier is a semicolon-delimited list of page identifiers, which must not have any extra whitespace.
  • Each page identifier is the ms-settings:xyz URI for the page, minus the ms-settings: prefix, so the identifier for the page with URI "ms-settings:network-wifi" would be just "network-wifi".

The default value for this setting is an empty string, which is interpreted as show everything.

Example 1, specifies that only the wifi and bluetooth pages should be shown (they have URIs ms-settings:network-wifi and ms-settings:bluetooth). All other pages (and the categories they're in) will be hidden:

showonly:network-wifi;bluetooth

Example 2, specifies that the wifi page should not be shown:

hide:network-wifi

ADMX Info:

  • GP Friendly name: Settings Page Visibility
  • GP name: SettingsPageVisibility
  • GP element: SettingsPageVisibilityBox
  • GP path: Control Panel
  • GP ADMX file name: ControlPanel.admx

To validate on Desktop, use the following steps:

  1. Open System Settings and verify that the About page is visible and accessible.
  2. Configure the policy with the following string: "hide:about".
  3. Open System Settings again and verify that the About page is no longer accessible.