2019-04-01 14:56:33 -07:00

19 KiB
Raw Blame History

title, description, ms.author, ms.topic, ms.prod, ms.technology, author, ms.date
title description ms.author ms.topic ms.prod ms.technology author ms.date
Policy CSP - Storage Policy CSP - Storage maricia article w10 windows MariciaAlforque 01/14/2019

Policy CSP - Storage

Warning

Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.


Storage policies

Storage/AllowDiskHealthModelUpdates
Storage/AllowStorageSenseGlobal
Storage/AllowStorageSenseTemporaryFilesCleanup
Storage/ConfigStorageSenseCloudContentDehydrationThreshold
Storage/ConfigStorageSenseDownloadsCleanupThreshold
Storage/ConfigStorageSenseGlobalCadence
Storage/ConfigStorageSenseRecycleBinCleanupThreshold
Storage/EnhancedStorageDevices
Storage/RemovableDiskDenyWriteAccess

Storage/AllowDiskHealthModelUpdates

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark3 check mark3 check mark3 check mark3 cross mark cross mark

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1709. Allows disk health model updates.

Value type is integer.

ADMX Info:

  • GP English name: Allow downloading updates to the Disk Failure Prediction Model
  • GP name: SH_AllowDiskHealthModelUpdates
  • GP path: System/Storage Health
  • GP ADMX file name: StorageHealth.admx

The following list shows the supported values:

  • 0 - Do not allow
  • 1 (default) - Allow

Storage/AllowStorageSenseGlobal

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark6 check mark6 check mark6 check mark6

Scope:

[!div class = "checklist"]

  • Device

Storage Sense can automatically clean some of the users files to free up disk space. By default, Storage Sense is automatically turned on when the machine runs into low disk space and is set to run whenever the machine runs into storage pressure. This cadence can be changed in Storage settings or set with the Storage/ConfigStorageSenseGlobalCadence group policy.

If you enable this policy setting without setting a cadence, Storage Sense is turned on for the machine with the default cadence of "during low free disk space." Users cannot disable Storage Sense, but they can adjust the cadence (unless you also configure the Storage/ConfigStorageSenseGlobalCadence group policy).

If you disable this policy setting, the machine will turn off Storage Sense. Users cannot enable Storage Sense.

If you do not configure this policy setting, Storage Sense is turned off by default until the user runs into low disk space or the user enables it manually. Users can configure this setting in Storage settings.

ADMX Info:

  • GP English name: Allow Storage Sense
  • GP name: SS_AllowStorageSenseGlobal
  • GP path: System/Storage Sense
  • GP ADMX file name: StorageSense.admx

Storage/AllowStorageSenseTemporaryFilesCleanup

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark6 check mark6 check mark6 check mark6

Scope:

[!div class = "checklist"]

  • Device

When Storage Sense runs, it can delete the users temporary files that are not in use.

If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect.

If you enable this policy setting, Storage Sense will delete the users temporary files that are not in use. Users cannot disable this setting in Storage settings.

If you disable this policy setting, Storage Sense will not delete the users temporary files. Users cannot enable this setting in Storage settings.

If you do not configure this policy setting, Storage Sense will delete the users temporary files by default. Users can configure this setting in Storage settings.

ADMX Info:

  • GP English name: Allow Storage Sense Temporary Files cleanup
  • GP name: SS_AllowStorageSenseTemporaryFilesCleanup
  • GP path: System/Storage Sense
  • GP ADMX file name: StorageSense.admx

Storage/ConfigStorageSenseCloudContentDehydrationThreshold

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark6 check mark6 check mark6 check mark6

Scope:

[!div class = "checklist"]

  • Device

When Storage Sense runs, it can dehydrate cloud-backed content that hasnt been opened in a certain amount of days.

If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect.

If you enable this policy setting, you must provide the number of days since a cloud-backed file has been opened before Storage Sense will dehydrate it. Supported values are: 0365.

If you set this value to zero, Storage Sense will not dehydrate any cloud-backed content. The default value is 0, which never dehydrates cloud-backed content.

If you disable or do not configure this policy setting, then Storage Sense will not dehydrate any cloud-backed content by default. Users can configure this setting in Storage settings.

ADMX Info:

  • GP English name: Configure Storage Sense Cloud Content dehydration threshold
  • GP name: SS_ConfigStorageSenseCloudContentDehydrationThreshold
  • GP path: System/Storage Sense
  • GP ADMX file name: StorageSense.admx

Storage/ConfigStorageSenseDownloadsCleanupThreshold

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark6 check mark6 check mark6 check mark6

Scope:

[!div class = "checklist"]

  • Device

When Storage Sense runs, it can delete files in the users Downloads folder if they havent been opened for more than a certain number of days.

If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect.

If you enable this policy setting, you must provide the number of days since a file in the Downloads folder has been opened before Storage Sense will delete it. Supported values are: 0365.

If you set this value to zero, Storage Sense will not delete files in the users Downloads folder. The default is 0, or never deleting files in the Downloads folder.

If you disable or do not configure this policy setting, then Storage Sense will not delete files in the users Downloads folder by default. Users can configure this setting in Storage settings.

ADMX Info:

  • GP English name: Configure Storage Storage Downloads cleanup threshold
  • GP name: SS_ConfigStorageSenseDownloadsCleanupThreshold
  • GP path: System/Storage Sense
  • GP ADMX file name: StorageSense.admx

Storage/ConfigStorageSenseGlobalCadence

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark6 check mark6 check mark6 check mark6

Scope:

[!div class = "checklist"]

  • Device

Storage Sense can automatically clean some of the users files to free up disk space. If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect.

If you enable this policy setting, you must provide the desired Storage Sense cadence.

The following are supported options:

  • 1 Daily
  • 7 Weekly
  • 30 Monthly
  • 0 During low free disk space

The default is 0 (during low free disk space).

If you do not configure this policy setting, then the Storage Sense cadence is set to “during low free disk space” by default. Users can configure this setting in Storage settings.

ADMX Info:

  • GP English name: Configure Storage Sense cadence
  • GP name: SS_ConfigStorageSenseGlobalCadence
  • GP path: System/Storage Sense
  • GP ADMX file name: StorageSense.admx

Storage/ConfigStorageSenseRecycleBinCleanupThreshold

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark6 check mark6 check mark6 check mark6

Scope:

[!div class = "checklist"]

  • Device

When Storage Sense runs, it can delete files in the users Recycle Bin if they have been there for over a certain amount of days.

If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect.

If you enable this policy setting, you must provide the minimum age threshold (in days) of a file in the Recycle Bin before Storage Sense will delete it. Supported values are: 0365.

If you set this value to zero, Storage Sense will not delete files in the users Recycle Bin. The default is 30 days.

If you disable or do not configure this policy setting, Storage Sense will delete files in the users Recycle Bin that have been there for over 30 days by default. Users can configure this setting in Storage settings.

ADMX Info:

  • GP English name: Configure Storage Sense Recycle Bin cleanup threshold
  • GP name: SS_ConfigStorageSenseRecycleBinCleanupThreshold
  • GP path: System/Storage Sense
  • GP ADMX file name: StorageSense.admx

Storage/EnhancedStorageDevices

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark cross mark cross mark

Scope:

[!div class = "checklist"]

  • Device

This policy setting configures whether or not Windows will activate an Enhanced Storage device.

If you enable this policy setting, Windows will not activate unactivated Enhanced Storage devices.

If you disable or do not configure this policy setting, Windows will activate unactivated Enhanced Storage devices.

Tip

This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see Understanding ADMX-backed policies.

You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to Enabling a policy.

The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see CDATA Sections.

ADMX Info:

  • GP English name: Do not allow Windows to activate Enhanced Storage devices
  • GP name: TCGSecurityActivationDisabled
  • GP path: System/Enhanced Storage Access
  • GP ADMX file name: enhancedstorage.admx

Storage/RemovableDiskDenyWriteAccess

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

[!div class = "checklist"]

  • Device

If you enable this policy setting, write access is denied to this removable storage class. If you disable or do not configure this policy setting, write access is allowed to this removable storage class. Note: To require that users write data to BitLocker-protected storage, enable the policy setting "Deny write access to drives not protected by BitLocker," which is located in "Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives."

Supported values:

  • 0 - Disable
  • 1 - Enable

ADMX Info:

  • GP English name: Removable Disks: Deny write access
  • GP name: RemovableDisks_DenyWrite_Access_2
  • GP element: RemovableDisks_DenyWrite_Access_2
  • GP path: System/Removable Storage Access
  • GP ADMX file name: RemovableStorage.admx

Footnote:

  • 1 - Added in Windows 10, version 1607.
  • 2 - Added in Windows 10, version 1703.
  • 3 - Added in Windows 10, version 1709.
  • 4 - Added in Windows 10, version 1803.
  • 5 - Added in Windows 10, version 1809.
  • 6 - Added in the next major release of Windows 10.