windows-itpro-docs/education/windows/windows-11-se-settings-list.md
2022-03-15 14:44:50 -07:00

6.3 KiB
Raw Blame History

title, description, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, author, ms.author, manager, ms.reviewer, ms.localizationpriority, ms.topic
title description ms.prod ms.mktglfcycl ms.sitesec ms.pagetype author ms.author manager ms.reviewer ms.localizationpriority ms.topic
Windows 11 SE settings list Windows 11 SE automatically configures settings in the operating system. Learn more about the settings you can control and manage, and the settings you can't change. w10 deploy library mobile aczechowski aaroncz dougeby medium article

Windows 11 SE for Education settings list

Applies to:

  • Windows 11 SE
  • Microsoft Intune for Education

Windows 11 SE automatically configures settings and features in the operating system. These settings use the Configuration Service Provider (CSPs) provided by Microsoft. You can use an MDM provider to configure these settings.

This article lists the settings automatically configured. For more information on Windows 11 SE, see Windows 11 SE for Education overview.

Settings that can be changed

The following table lists and describes the settings that can be changed by administrators.

Setting Description
Block manual unenrollment Default: Blocked

Users can't unenroll their devices from device management services.

Experience/AllowManualMDMUnenrollment CSP
Allow option to Show Network Default: Allowed

Gives users the option to see the Show Network folder in File Explorer.
Allow option to Show This PC Default: Allowed

Gives user the option to see the Show This PC folder in File Explorer.
Set Allowed Folder location Default folders: Documents, Desktop, Pictures, and Downloads

Gives user access to these folders.
Set Allowed Storage Locations Default: Blocks Local Drives and Network Drives

Blocks user access to these storage locations.
Allow News and Interests Default: Hide

Hides Widgets.
Disable advertising ID Default: Disabled

Blocks apps from using usage data to tailor advertisements.

Privacy/DisableAdvertisingId CSP
Visible settings pages Default:

Enable App Install Control Default: Turned On

Users cant download apps from the internet.

SmartScreen/EnableAppInstallControl CSP
Configure Storage Sense Cloud Content Dehydration Threshold Default: 30 days

If a file hasnt been opened in 30 days, it becomes an online-only file. Online-only files can be opened when there's an internet connection. When an online-only file is opened on a device, it downloads and becomes locally available on that device. The file is available until it's unopened for the specified number of days, and becomes online-only again.

Storage/ConfigStorageSenseCloudContentDehydrationThreshold CSP
Allow Telemetry Default: Required Telemetry Only

Sends only basic device info, including quality-related data, app compatibility, and similar data to keep the device secure and up-to-date.

System/AllowTelemetry CSP
Allow Experimentation Default: Disabled

Microsoft can't experiment with the product to study user preferences or device behavior.

System/AllowExperimentation CSP
Block external extensions Default: Blocked

In Microsoft Edge, users can't install external extensions.

BlockExternalExtensions
Configure new tab page Default: Office.com

In Microsoft Edge, the new tab page defaults to office.com.

Configure the new tab page URL
Configure homepage Default: Office.com

In Microsoft Edge, the homepage defaults to office.com.

HomepageIsNewTabPage
Prevent SmartScreen prompt override Default: Enabled

In Microsoft Edge, users can't override Windows Defender SmartScreen warnings.

PreventSmartScreenPromptOverride

Settings that can't be changed

The following settings can't be changed.

Category Description
Visible Folders in File Explorer By default, the Desktop, Downloads, Documents, and Pictures folders are visible to users in File Explorer. Users can make other folders, like This PC, visible in View > Options.
Launch Windows Maximized All Windows are opened in the maximized view.
Windows Snapping Windows snapping is limited to two Windows.
Allowed Account Types Microsoft accounts and Azure AD accounts are allowed.
Virtual Desktops Virtual Desktops are blocked.
Microsoft Store The Microsoft Store is blocked.
Administrative tools Administrative tools, such as the command prompt and Windows PowerShell, can't be opened. Windows PowerShell scripts deployed using Microsoft Endpoint Manager can run.
Apps Only certain apps are allowed to run on Windows 11 SE. For more info on what apps can run on Windows 11 SE, see Windows 11 SE for Education overview.

What's available in the Settings app

On Windows 11 SE devices, the Settings app shows the following setting pages. Depending on the hardware, some setting pages might not be shown.

  • Accessibility

  • Accounts

    • Email & accounts
  • Apps

  • Bluetooth & devices

    • Bluetooth
    • Printers & scanners
    • Mouse
    • Touchpad
    • Typing
    • Pen
    • AutoPlay
  • Network & internet

    • WiFi
    • VPN
  • Personalization

    • Taskbar
  • Privacy & security

  • System

    • Display
    • Notifications
    • Tablet mode
    • Multitasking
    • Projecting to this PC
  • Time & Language

    • Language & region

Next steps

Windows 11 SE for Education overview