windows-itpro-docs/windows/client-management/mdm/policy-csp-experience.md

44 KiB
Raw Blame History

title, description, ms.author, ms.topic, ms.prod, ms.technology, author, ms.date
title description ms.author ms.topic ms.prod ms.technology author ms.date
Policy CSP - Experience Policy CSP - Experience maricia article w10 windows MariciaAlforque 07/30/2018

Policy CSP - Experience

Warning

Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.


Experience policies

Experience/AllowClipboardHistory
Experience/AllowCopyPaste
Experience/AllowCortana
Experience/AllowDeviceDiscovery
Experience/AllowFindMyDevice
Experience/AllowManualMDMUnenrollment
Experience/AllowSIMErrorDialogPromptWhenNoSIM
Experience/AllowSaveAsOfOfficeFiles
Experience/AllowScreenCapture
Experience/AllowSharingOfOfficeFiles
Experience/AllowSyncMySettings
Experience/AllowTailoredExperiencesWithDiagnosticData
Experience/AllowTaskSwitcher
Experience/AllowThirdPartySuggestionsInWindowsSpotlight
Experience/AllowVoiceRecording
Experience/AllowWindowsConsumerFeatures
Experience/AllowWindowsSpotlight
Experience/AllowWindowsSpotlightOnActionCenter
Experience/AllowWindowsSpotlightOnSettings
Experience/AllowWindowsSpotlightWindowsWelcomeExperience
Experience/AllowWindowsTips
Experience/ConfigureWindowsSpotlightOnLockScreen
Experience/DoNotShowFeedbackNotifications
Experience/DoNotSyncBrowserSettings
Experience/PreventUsersFromTurningOnBrowserSyncing

Experience/AllowClipboardHistory

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark5 check mark5 check mark5 check mark5

Scope:

[!div class = "checklist"]

  • Device

Allows history of clipboard items to be stored in memory.

Value type is integer. Supported values:

  • 0 - Not allowed
  • 1 - Allowed (default)

ADMX Info:

  • GP English name: Allow Clipboard History
  • GP name: AllowClipboardHistory
  • GP path: System/OS Policies
  • GP ADMX file name: OSPolicy.admx

Validation procedure

  1. Configure Experiences/AllowClipboardHistory to 0.
  2. Open Notepad (or any editor app), select a text, and copy it to the clipboard.
  3. Press Win+V to open the clipboard history UI.
  4. You should not see any clipboard item including current item you copied.
  5. The setting under Settings App->System->Clipboard should be grayed out with policy warning.

Experience/AllowCopyPaste

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark cross mark cross mark cross mark cross mark check mark check mark

Scope:

[!div class = "checklist"]

  • Device

Note

 This policy is only enforced in Windows 10 Mobile and not supported in Windows 10 for desktop.

Specifies whether copy and paste is allowed.

Most restricted value is 0.

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Experience/AllowCortana

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark check mark

Scope:

[!div class = "checklist"]

  • Device

Specifies whether Cortana is allowed on the device. If you enable or dont configure this setting, Cortana is allowed on the device. If you disable this setting, Cortana is turned off. When Cortana is off, users will still be able to use search to find items on the device.

Most restricted value is 0.

ADMX Info:

  • GP English name: Allow Cortana
  • GP name: AllowCortana
  • GP path: Windows Components/Search
  • GP ADMX file name: Search.admx

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Experience/AllowDeviceDiscovery

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark check mark

Scope:

[!div class = "checklist"]

  • Device

Allows users to turn on/off device discovery UX.

When set to 0 , the projection pane is disabled. The Win+P and Win+K shortcut keys will not work on.

Most restricted value is 0.

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Experience/AllowFindMyDevice

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark2 cross mark check mark2 check mark2 check mark2 check mark2

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1703. This policy turns on Find My Device.

When Find My Device is on, the device and its location are registered in the cloud so that the device can be located when the user initiates a Find command from account.microsoft.com. In Windows 10, version 1709 devices that are compatible with active digitizers, enabling Find My Device will also allow the user to view the last location of use of their active digitizer on their device; this location is stored locally on the user's device after each use of their active digitizer.

When Find My Device is off, the device and its location are not registered and the Find My Device feature will not work. In Windows 10, version 1709 the user will not be able to view the location of the last use of their active digitizer on their device.

ADMX Info:

  • GP English name: Turn On/Off Find My Device
  • GP name: FindMy_AllowFindMyDeviceConfig
  • GP path: Windows Components/Find My Device
  • GP ADMX file name: FindMy.admx

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Experience/AllowManualMDMUnenrollment

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark check mark

Scope:

[!div class = "checklist"]

  • Device

Specifies whether to allow the user to delete the workplace account using the workplace control panel. If the device is Azure Active Directory joined and MDM enrolled (e.g. auto-enrolled), then disabling the MDM unenrollment has no effect.

Note

 The MDM server can always remotely delete the account.

Most restricted value is 0.

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Experience/AllowSIMErrorDialogPromptWhenNoSIM

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark cross mark cross mark cross mark cross mark check mark check mark

Scope:

[!div class = "checklist"]

  • Device

Note

 This policy is only enforced in Windows 10 Mobile and not supported in Windows 10 for desktop.

Specifies whether to display dialog prompt when no SIM card is detected.

The following list shows the supported values:

  • 0 SIM card dialog prompt is not displayed.
  • 1 (default) SIM card dialog prompt is displayed.

Experience/AllowSaveAsOfOfficeFiles

Scope:

[!div class = "checklist"]

  • Device

This policy is deprecated.


Experience/AllowScreenCapture

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark cross mark cross mark cross mark cross mark check mark check mark

Scope:

[!div class = "checklist"]

  • Device

Note

 This policy is only enforced in Windows 10 Mobile and not supported in Windows 10 for desktop.

Specifies whether screen capture is allowed.

Most restricted value is 0.

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Experience/AllowSharingOfOfficeFiles

Scope:

[!div class = "checklist"]

  • Device

This policy is deprecated.


Experience/AllowSyncMySettings

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark check mark

Scope:

[!div class = "checklist"]

  • Device

Allows or disallows all Windows sync settings on the device. For information about what settings are sync'ed, see About sync setting on Windows 10 devices.

The following list shows the supported values:

  • 0 Sync settings is not allowed.
  • 1 (default) Sync settings allowed.

Experience/AllowTailoredExperiencesWithDiagnosticData

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark2 cross mark check mark2 check mark2 cross mark cross mark

Scope:

[!div class = "checklist"]

  • User

Note

 This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

Added in Windows 10, version 1703. This policy allows you to prevent Windows from using diagnostic data to provide customized experiences to the user. If you enable this policy setting, Windows will not use diagnostic data from this device to customize content shown on the lock screen, Windows tips, Microsoft consumer features, or other related features. If these features are enabled, users will still see recommendations, tips and offers, but they may be less relevant. If you disable or do not configure this policy setting, Microsoft will use diagnostic data to provide personalized recommendations, tips, and offers to tailor Windows for the user's needs and make it work better for them.

Diagnostic data can include browser, app and feature usage, depending on the "Diagnostic and usage data" setting value.

Note

This setting does not control Cortana cutomized experiences because there are separate policies to configure it.

Most restricted value is 0.

ADMX Info:

  • GP English name: Do not use diagnostic data for tailored experiences
  • GP name: DisableTailoredExperiencesWithDiagnosticData
  • GP path: Windows Components/Cloud Content
  • GP ADMX file name: CloudContent.admx

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Experience/AllowTaskSwitcher

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark cross mark cross mark cross mark cross mark check mark check mark

Scope:

[!div class = "checklist"]

  • Device

Note

 This policy is only enforced in Windows 10 Mobile and not supported in Windows 10 for desktop.

Allows or disallows task switching on the device.

The following list shows the supported values:

  • 0 Task switching not allowed.
  • 1 (default) Task switching allowed.

Experience/AllowThirdPartySuggestionsInWindowsSpotlight

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark1 check mark1 check mark1 check mark1 cross mark cross mark

Scope:

[!div class = "checklist"]

  • User

Note

 This policy is only available for Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education.

Specifies whether to allow app and content suggestions from third-party software publishers in Windows spotlight features like lock screen spotlight, suggested apps in the Start menu, and Windows tips. Users may still see suggestions for Microsoft features, apps, and services.

ADMX Info:

  • GP English name: Do not suggest third-party content in Windows spotlight
  • GP name: DisableThirdPartySuggestions
  • GP path: Windows Components/Cloud Content
  • GP ADMX file name: CloudContent.admx

The following list shows the supported values:

  • 0 Third-party suggestions not allowed.
  • 1 (default) Third-party suggestions allowed.

Experience/AllowVoiceRecording

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark cross mark cross mark cross mark cross mark check mark check mark

Scope:

[!div class = "checklist"]

  • Device

Note

 This policy is only enforced in Windows 10 Mobile and not supported in Windows 10 for desktop.

Specifies whether voice recording is allowed for apps.

Most restricted value is 0.

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Experience/AllowWindowsConsumerFeatures

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark cross mark cross mark check mark check mark cross mark cross mark

Scope:

[!div class = "checklist"]

  • Device

Note

 This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

This policy allows IT admins to turn on experiences that are typically for consumers only, such as Start suggestions, Membership notifications, Post-OOBE app install and redirect tiles.

Most restricted value is 0.

ADMX Info:

  • GP English name: Turn off Microsoft consumer experiences
  • GP name: DisableWindowsConsumerFeatures
  • GP path: Windows Components/Cloud Content
  • GP ADMX file name: CloudContent.admx

The following list shows the supported values:

  • 0 Not allowed.
  • 1 Allowed.

Experience/AllowWindowsSpotlight

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark cross mark cross mark check mark1 check mark1 cross mark cross mark

Scope:

[!div class = "checklist"]

  • User

Note

 This policy is only available for Windows 10 Enterprise and Windows 10 Education.

Specifies whether to turn off all Windows spotlight features at once. If you enable this policy setting, Windows spotlight on lock screen, Windows Tips, Microsoft consumer features and other related features will be turned off. You should enable this policy setting if your goal is to minimize network traffic from target devices. If you disable or do not configure this policy setting, Windows spotlight features are allowed and may be controlled individually using their corresponding policy settings.

Most restricted value is 0.

ADMX Info:

  • GP English name: Turn off all Windows spotlight features
  • GP name: DisableWindowsSpotlightFeatures
  • GP path: Windows Components/Cloud Content
  • GP ADMX file name: CloudContent.admx

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Experience/AllowWindowsSpotlightOnActionCenter

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark cross mark cross mark check mark2 check mark2 cross mark cross mark

Scope:

[!div class = "checklist"]

  • User

Note

 This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

Added in Windows 10, version 1703. This policy allows administrators to prevent Windows spotlight notifications from being displayed in the Action Center. If you enable this policy, Windows spotlight notifications will no longer be displayed in the Action Center. If you disable or do not configure this policy, Microsoft may display notifications in the Action Center that will suggest apps or features to help users be more productive on Windows.

Most restricted value is 0.

ADMX Info:

  • GP English name: Turn off Windows Spotlight on Action Center
  • GP name: DisableWindowsSpotlightOnActionCenter
  • GP path: Windows Components/Cloud Content
  • GP ADMX file name: CloudContent.admx

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Experience/AllowWindowsSpotlightOnSettings

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark cross mark cross mark check mark4 check mark4

Scope:

[!div class = "checklist"]

  • User

Added in Windows 10, version 1803. This policy allows IT admins to turn off Suggestions in Settings app. These suggestions from Microsoft may show after each OS clean install, upgrade or an on-going basis to help users discover apps/features on Windows or across devices, to make thier experience productive.

  • User setting is under Settings -> Privacy -> General -> Show me suggested content in Settings app.
  • User Setting is changeable on a per user basis.
  • If the Group policy is set to off, no suggestions will be shown to the user in Settings app.

ADMX Info:

  • GP English name: Turn off Windows Spotlight on Settings
  • GP name: DisableWindowsSpotlightOnSettings
  • GP path: Windows Components/Cloud Content
  • GP ADMX file name: CloudContent.admx

The following list shows the supported values:

  • 0 - Not allowed.
  • 1 - Allowed.

Experience/AllowWindowsSpotlightWindowsWelcomeExperience

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark cross mark cross mark check mark2 check mark2 cross mark cross mark

Scope:

[!div class = "checklist"]

  • User

Note

 This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

Added in Windows 10, version 1703. This policy setting lets you turn off the Windows spotlight Windows welcome experience feature. The Windows welcome experience feature introduces onboard users to Windows; for example, launching Microsoft Edge with a webpage that highlights new features. If you enable this policy, the Windows welcome experience will no longer be displayed when there are updates and changes to Windows and its apps. If you disable or do not configure this policy, the Windows welcome experience will be launched to inform onboard users about what's new, changed, and suggested.

Most restricted value is 0.

ADMX Info:

  • GP English name: Turn off the Windows Welcome Experience
  • GP name: DisableWindowsSpotlightWindowsWelcomeExperience
  • GP path: Windows Components/Cloud Content
  • GP ADMX file name: CloudContent.admx

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Allowed.

Experience/AllowWindowsTips

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark cross mark cross mark check mark check mark cross mark cross mark

Scope:

[!div class = "checklist"]

  • Device

Enables or disables Windows Tips / soft landing.

ADMX Info:

  • GP English name: Do not show Windows tips
  • GP name: DisableSoftLanding
  • GP path: Windows Components/Cloud Content
  • GP ADMX file name: CloudContent.admx

The following list shows the supported values:

  • 0 Disabled.
  • 1 (default) Enabled.

Experience/ConfigureWindowsSpotlightOnLockScreen

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark cross mark cross mark check mark1 check mark1 cross mark cross mark

Scope:

[!div class = "checklist"]

  • User

Note

 This policy is only available for Windows 10 Enterprise and Windows 10 Education.

Allows IT admins to specify whether spotlight should be used on the user's lock screen. If your organization does not have an Enterprise spotlight content service, then this policy will behave the same as a setting of 1.

ADMX Info:

  • GP English name: Configure Windows spotlight on lock screen
  • GP name: ConfigureWindowsSpotlight
  • GP path: Windows Components/Cloud Content
  • GP ADMX file name: CloudContent.admx

The following list shows the supported values:

  • 0 None.
  • 1 (default) Windows spotlight enabled.
  • 2 placeholder only for future extension. Using this value has no effect.

Experience/DoNotShowFeedbackNotifications

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

[!div class = "checklist"]

  • Device

Prevents devices from showing feedback questions from Microsoft.

If you enable this policy setting, users will no longer see feedback notifications through the Feedback hub app. If you disable or do not configure this policy setting, users may see notifications through the Feedback hub app asking users for feedback.

If you disable or do not configure this policy setting, users can control how often they receive feedback questions.

ADMX Info:

  • GP English name: Do not show feedback notifications
  • GP name: DoNotShowFeedbackNotifications
  • GP path: Data Collection and Preview Builds
  • GP ADMX file name: FeedbackNotifications.admx

The following list shows the supported values:

  • 0 (default) Feedback notifications are not disabled. The actual state of feedback notifications on the device will then depend on what GP has configured or what the user has configured locally.
  • 1 Feedback notifications are disabled.

Experience/DoNotSyncBrowserSettings

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark cross mark cross mark check mark5 check mark5

Scope:

[!div class = "checklist"]

  • Device

[!INCLUDE do-not-sync-browser-settings-shortdesc]

Related policy: PreventUsersFromTurningOnBrowserSyncing

ADMX Info:

  • GP English name: Do not sync browser settings
  • GP name: DisableWebBrowserSettingSync
  • GP path: Windows Components/Sync your settings
  • GP ADMX file name: SettingSync.admx

Supported values:

  • 0 (default) - Allowed/turned on. The "browser" group syncs automatically between users devices and lets users to make changes.
  • 2 - Prevented/turned off. The "browser" group does not use the Sync your Settings option.

Sync the browser settings automatically

Set both DoNotSyncBrowserSettings and PreventUsersFromTurningOnBrowserSyncing to 0 (Allowed/turned on).

Prevent syncing of browser settings and prevent users from turning it on

  1. Set DoNotSyncBrowserSettings to 2 (Prevented/turned off).
  2. Set PreventUsersFromTurningOnBrowserSyncing to 1 (Prevented/turned off).

Prevent syncing of browser settings and let users turn on syncing

  1. Set DoNotSyncBrowserSettings to 2 (Prevented/turned off).
  2. Set PreventUsersFromTurningOnBrowserSyncing to 0 (Allowed/turned on).

Turn syncing off by default but dont disable

Set DoNotSyncBrowserSettings to 2 (Prevented/turned off) and select the Allow users to turn “browser” syncing option.


Experience/PreventUsersFromTurningOnBrowserSyncing

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark cross mark cross mark check mark5 check mark5

Scope:

[!div class = "checklist"]

  • Device

[!INCLUDE prevent-users-to-turn-on-browser-syncing-shortdesc]

Related policy: DoNotSyncBrowserSettings

ADMX Info:

  • GP English name: Prevent users from turning on browser syncing
  • GP name: PreventUsersFromTurningOnBrowserSyncing
  • GP path: Windows Components/Sync your settings
  • GP ADMX file name: SettingSync.admx

Supported values:

  • 0 - Allowed/turned on. Users can sync the browser settings.
  • 1 (default) - Prevented/turned off.

Sync the browser settings automatically

Set both DoNotSyncBrowserSettings and PreventUsersFromTurningOnBrowserSyncing to 0 (Allowed/turned on).

Prevent syncing of browser settings and prevent users from turning it on

  1. Set DoNotSyncBrowserSettings to 2 (Prevented/turned off).
  2. Set PreventUsersFromTurningOnBrowserSyncing to 1 (Prevented/turned off).

Prevent syncing of browser settings and let users turn on syncing

  1. Set DoNotSyncBrowserSettings to 2 (Prevented/turned off).
  2. Set PreventUsersFromTurningOnBrowserSyncing to 0 (Allowed/turned on).

Validation procedure:

  1. Select More > Settings.
  2. See if the setting is enabled or disabled based on your selection.

Footnote:

  • 1 - Added in Windows 10, version 1607.
  • 2 - Added in Windows 10, version 1703.
  • 3 - Added in Windows 10, version 1709.
  • 4 - Added in Windows 10, version 1803.
  • 5 - Added in the next major release of Windows 10.