Siddarth Mandalika 7c51a3cacd changed metadata
2021-10-21 16:53:31 +05:30

43 KiB
Raw Blame History

title, description, ms.author, ms.topic, ms.prod, ms.technology, author, ms.localizationpriority, ms.date, ms.reviewer, manager
title description ms.author ms.topic ms.prod ms.technology author ms.localizationpriority ms.date ms.reviewer manager
Policy CSP - Start Use the Policy CSP - Start setting to control the visibility of the Documents shortcut on the Start menu. dansimp article m365-security windows-sec manikadhiman medium 09/27/2019 dansimp

Policy CSP - Start


Start policies

Start/AllowPinnedFolderDocuments
Start/AllowPinnedFolderDownloads
Start/AllowPinnedFolderFileExplorer
Start/AllowPinnedFolderHomeGroup
Start/AllowPinnedFolderMusic
Start/AllowPinnedFolderNetwork
Start/AllowPinnedFolderPersonalFolder
Start/AllowPinnedFolderPictures
Start/AllowPinnedFolderSettings
Start/AllowPinnedFolderVideos
Start/DisableContextMenus
Start/ForceStartSize
Start/HideAppList
Start/HideChangeAccountSettings
Start/HideFrequentlyUsedApps
Start/HideHibernate
Start/HideLock
Start/HidePeopleBar
Start/HidePowerButton
Start/HideRecentJumplists
Start/HideRecentlyAddedApps
Start/HideRestart
Start/HideShutDown
Start/HideSignOut
Start/HideSleep
Start/HideSwitchAccount
Start/HideUserTile
Start/ImportEdgeAssets
Start/NoPinningToTaskbar
Start/StartLayout

Start/AllowPinnedFolderDocuments

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

This policy controls the visibility of the Documents shortcut on the Start menu.

The following list shows the supported values:

  • 0 The shortcut is hidden and disables the setting in the Settings app.
  • 1 The shortcut is visible and disables the setting in the Settings app.
  • 65535 (default) - There is no enforced configuration and the setting can be changed by the user.

Start/AllowPinnedFolderDownloads

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

This policy controls the visibility of the Downloads shortcut on the Start menu.

The following list shows the supported values:

  • 0 The shortcut is hidden and disables the setting in the Settings app.
  • 1 The shortcut is visible and disables the setting in the Settings app.
  • 65535 (default) - There is no enforced configuration and the setting can be changed by the user.

Start/AllowPinnedFolderFileExplorer

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

This policy controls the visibility of the File Explorer shortcut on the Start menu.

The following list shows the supported values:

  • 0 The shortcut is hidden and disables the setting in the Settings app.
  • 1 The shortcut is visible and disables the setting in the Settings app.
  • 65535 (default) - There is no enforced configuration and the setting can be changed by the user.

Start/AllowPinnedFolderHomeGroup

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

This policy controls the visibility of the HomeGroup shortcut on the Start menu.

The following list shows the supported values:

  • 0 The shortcut is hidden and disables the setting in the Settings app.
  • 1 The shortcut is visible and disables the setting in the Settings app.
  • 65535 (default) - There is no enforced configuration and the setting can be changed by the user.

Start/AllowPinnedFolderMusic

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

This policy controls the visibility of the Music shortcut on the Start menu.

The following list shows the supported values:

  • 0 The shortcut is hidden and disables the setting in the Settings app.
  • 1 The shortcut is visible and disables the setting in the Settings app.
  • 65535 (default) - There is no enforced configuration and the setting can be changed by the user.

Start/AllowPinnedFolderNetwork

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

This policy controls the visibility of the Network shortcut on the Start menu.

The following list shows the supported values:

  • 0 The shortcut is hidden and disables the setting in the Settings app.
  • 1 The shortcut is visible and disables the setting in the Settings app.
  • 65535 (default) - There is no enforced configuration and the setting can be changed by the user.

Start/AllowPinnedFolderPersonalFolder

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

This policy controls the visibility of the PersonalFolder shortcut on the Start menu.

The following list shows the supported values:

  • 0 The shortcut is hidden and disables the setting in the Settings app.
  • 1 The shortcut is visible and disables the setting in the Settings app.
  • 65535 (default) - There is no enforced configuration and the setting can be changed by the user.

Start/AllowPinnedFolderPictures

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

This policy controls the visibility of the Pictures shortcut on the Start menu.

The following list shows the supported values:

  • 0 The shortcut is hidden and disables the setting in the Settings app.
  • 1 The shortcut is visible and disables the setting in the Settings app.
  • 65535 (default) - There is no enforced configuration and the setting can be changed by the user.

Start/AllowPinnedFolderSettings

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

This policy controls the visibility of the Settings shortcut on the Start menu.

The following list shows the supported values:

  • 0 The shortcut is hidden and disables the setting in the Settings app.
  • 1 The shortcut is visible and disables the setting in the Settings app.
  • 65535 (default) - There is no enforced configuration and the setting can be changed by the user.

Start/AllowPinnedFolderVideos

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

This policy controls the visibility of the Videos shortcut on the Start menu.

The following list shows the supported values:

  • 0 The shortcut is hidden and disables the setting in the Settings app.
  • 1 The shortcut is visible and disables the setting in the Settings app.
  • 65535 (default) - There is no enforced configuration and the setting can be changed by the user.

Start/DisableContextMenus

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • User
  • Device

Enabling this policy prevents context menus from being invoked in the Start Menu.

ADMX Info:

  • GP Friendly name: Disable context menus in the Start Menu
  • GP name: DisableContextMenusInStart
  • GP path: Start Menu and Taskbar
  • GP ADMX file name: StartMenu.admx

The following list shows the supported values:

  • 0 (default) False (Do not disable).
  • 1 - True (disable).

Start/ForceStartSize

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • User
  • Device

Note

 This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

Forces the start screen size.

If there is policy configuration conflict, the latest configuration request is applied to the device.

The following list shows the supported values:

  • 0 (default) Do not force size of Start.
  • 1 Force non-fullscreen size of Start.
  • 2 - Force a fullscreen size of Start.

Start/HideAppList

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • User
  • Device

Note

 This policy requires reboot to take effect.

Allows IT Admins to configure Start by collapsing or removing the all apps list.

Note

There were issues reported with the previous release of this policy and a fix was added in Windows 10, version 1709.

To validate on Desktop, do the following:

  • 1 - Enable policy and restart explorer.exe
  • 2a - If set to '1': Verify that the all apps list is collapsed, and that the Settings toggle is not grayed out.
  • 2b - If set to '2': Verify that the all apps list is collapsed, and that the Settings toggle is grayed out.
  • 2c - If set to '3': Verify that there is no way of opening the all apps list from Start, and that the Settings toggle is grayed out.

The following list shows the supported values:

  • 0 (default) None.
  • 1 Hide all apps list.
  • 2 - Hide all apps list, and Disable "Show app list in Start menu" in Settings app.
  • 3 - Hide all apps list, remove all apps button, and Disable "Show app list in Start menu" in Settings app.

Start/HideChangeAccountSettings

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows IT Admins to configure Start by hiding "Change account settings" from appearing in the user tile.

The following list shows the supported values:

  • 0 (default) False (do not hide).
  • 1 - True (hide).

To validate on Desktop, do the following:

  1. Enable policy.
  2. Open Start, click on the user tile, and verify that "Change account settings" is not available.

Start/HideFrequentlyUsedApps

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • User
  • Device

Note

 This policy requires reboot to take effect.

Allows IT Admins to configure Start by hiding most used apps.

The following list shows the supported values:

  • 0 (default) False (do not hide).
  • 1 - True (hide).

To validate on Desktop, do the following:

  1. Enable "Show most used apps" in the Settings app.
  2. Use some apps to get them into the most used group in Start.
  3. Enable policy.
  4. Restart explorer.exe
  5. Check that "Show most used apps" Settings toggle is grayed out.
  6. Check that most used apps do not appear in Start.

Start/HideHibernate

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows IT Admins to configure Start by hiding "Hibernate" from appearing in the Power button.

Note

 This policy can only be verified on laptops as "Hibernate" does not appear on regular PC's.

The following list shows the supported values:

  • 0 (default) False (do not hide).
  • 1 - True (hide).

To validate on Laptop, do the following:

  1. Enable policy.
  2. Open Start, click on the Power button, and verify "Hibernate" is not available.

Start/HideLock

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows IT Admins to configure Start by hiding "Lock" from appearing in the user tile.

The following list shows the supported values:

  • 0 (default) False (do not hide).
  • 1 - True (hide).

To validate on Desktop, do the following:

  1. Enable policy.
  2. Open Start, click on the user tile, and verify "Lock" is not available.

Start/HidePeopleBar

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • User

Enabling this policy removes the people icon from the taskbar as well as the corresponding settings toggle. It also prevents users from pinning people to the taskbar.

Value type is integer.

ADMX Info:

  • GP Friendly name: Remove the People Bar from the taskbar
  • GP name: HidePeopleBar
  • GP path: Start Menu and Taskbar
  • GP ADMX file name: StartMenu.admx

The following list shows the supported values:

  • 0 (default) False (do not hide).
  • 1 - True (hide).

Start/HidePowerButton

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Note

 This policy requires reboot to take effect.

Allows IT Admins to configure Start by hiding the Power button from appearing.

The following list shows the supported values:

  • 0 (default) False (do not hide).
  • 1 - True (hide).

To validate on Desktop, do the following:

  1. Enable policy.
  2. Open Start, and verify the power button is not available.

Start/HideRecentJumplists

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Note

 This policy requires reboot to take effect.

Allows IT Admins to configure Start by hiding recently opened items in the jump lists from appearing.

The following list shows the supported values:

  • 0 (default) False (do not hide).
  • 1 - True (hide).

To validate on Desktop, do the following:

  1. Enable "Show recently opened items in Jump Lists on Start of the taskbar" in Settings.
  2. Pin Photos to the taskbar, and open some images in the photos app.
  3. Right click the pinned photos app and verify that a jump list of recently opened items pops up.
  4. Toggle "Show recently opened items in Jump Lists on Start of the taskbar" in Settings to clear jump lists.
  5. Enable policy.
  6. Restart explorer.exe
  7. Check that Settings toggle is grayed out.
  8. Repeat Step 2.
  9. Right Click pinned photos app and verify that there is no jump list of recent items.

Start/HideRecentlyAddedApps

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • User
  • Device

Note

 This policy requires reboot to take effect.

Allows IT Admins to configure Start by hiding recently added apps.

ADMX Info:

  • GP Friendly name: Remove "Recently added" list from Start Menu
  • GP name: HideRecentlyAddedApps
  • GP path: Start Menu and Taskbar
  • GP ADMX file name: StartMenu.admx

The following list shows the supported values:

  • 0 (default) False (do not hide).
  • 1 - True (hide).

To validate on Desktop, do the following:

  1. Enable "Show recently added apps" in the Settings app.
  2. Check if there are recently added apps in Start (if not, install some).
  3. Enable policy.
  4. Restart explorer.exe
  5. Check that "Show recently added apps" Settings toggle is grayed out.
  6. Check that recently added apps do not appear in Start.

Start/HideRestart

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows IT Admins to configure Start by hiding "Restart" and "Update and restart" from appearing in the Power button.

The following list shows the supported values:

  • 0 (default) False (do not hide).
  • 1 - True (hide).

To validate on Desktop, do the following:

  1. Enable policy.
  2. Open Start, click on the Power button, and verify "Restart" and "Update and restart" are not available.

Start/HideShutDown

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows IT Admins to configure Start by hiding "Shut down" and "Update and shut down" from appearing in the Power button.

The following list shows the supported values:

  • 0 (default) False (do not hide).
  • 1 - True (hide).

To validate on Desktop, do the following:

  1. Enable policy.
  2. Open Start, click on the Power button, and verify "Shut down" and "Update and shut down" are not available.

Start/HideSignOut

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows IT Admins to configure Start by hiding "Sign out" from appearing in the user tile.

The following list shows the supported values:

  • 0 (default) False (do not hide).
  • 1 - True (hide).

To validate on Desktop, do the following:

  1. Enable policy.
  2. Open Start, click on the user tile, and verify "Sign out" is not available.

Start/HideSleep

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows IT Admins to configure Start by hiding "Sleep" from appearing in the Power button.

The following list shows the supported values:

  • 0 (default) False (do not hide).
  • 1 - True (hide).

To validate on Desktop, do the following:

  1. Enable policy.
  2. Open Start, click on the Power button, and verify that "Sleep" is not available.

Start/HideSwitchAccount

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows IT Admins to configure Start by hiding "Switch account" from appearing in the user tile.

The following list shows the supported values:

  • 0 (default) False (do not hide).
  • 1 - True (hide).

To validate on Desktop, do the following:

  1. Enable policy.
  2. Open Start, click on the user tile, and verify that "Switch account" is not available.

Start/HideUserTile

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Note

 This policy requires reboot to take effect.

Allows IT Admins to configure Start by hiding the user tile.

The following list shows the supported values:

  • 0 (default) False (do not hide).
  • 1 - True (hide).

To validate on Desktop, do the following:

  1. Enable policy.
  2. Log off.
  3. Log in, and verify that the user tile is gone from Start.

Start/ImportEdgeAssets

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Note

 This policy requires reboot to take effect.

Here is additional SKU support information:

Release SKU Supported
Windows 10, version 1607 and older Not supported
Windows 10, version 1703 and later Enterprise, Education, Business
Windows 10, version 1709 and later Enterprise, Education, Business, Pro, ProEducation, S, ProWorkstation

This policy imports Edge assets (e.g. .png/.jpg files) for secondary tiles into its local app data path which allows the StartLayout policy to pin Edge secondary tiles as weblink that tie to the image asset files.

Important

 Please note that the import happens only when StartLayout policy is changed. So it is better to always change ImportEdgeAssets policy at the same time as StartLayout policy whenever there are Edge secondary tiles to be pinned from StartLayout policy.

The value set for this policy is an XML string containing Edge assets. For an example XML string, see Add image for secondary Microsoft Edge tiles.

To validate on Desktop, do the following:

  1. Set policy with an XML for Edge assets.
  2. Set StartLayout policy to anything so that it would trigger the Edge assets import.
  3. Sign out/in.
  4. Verify that all Edge assets defined in XML show up in %LOCALAPPDATA%\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState path.

Start/NoPinningToTaskbar

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • Device

Allows IT Admins to configure the taskbar by disabling pinning and unpinning apps on the taskbar.

The following list shows the supported values:

  • 0 (default) False (pinning enabled).
  • 1 - True (pinning disabled).

To validate on Desktop, do the following:

  1. Enable policy.
  2. Right click on a program pinned to taskbar.
  3. Verify that "Unpin from taskbar" menu does not show.
  4. Open Start and right click on one of the app list icons.
  5. Verify that More->Pin to taskbar menu does not show.

Start/StartLayout

Edition Windows 10 Windows 11
Home No No
Pro Yes Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

[!div class = "checklist"]

  • User
  • Device

Important

In addition to being able to set this node on a per user-basis, it can now also be set on a per-device basis. For more information, see Policy scope

Here is additional SKU support information:

Release SKU Supported
Windows 10, version 1511 and older Not supported
Windows 10, version 1607 and later Enterprise, Education, Business
Windows 10, version 1709 and later Enterprise, Education, Business, Pro, ProEducation, S, ProWorkstation

Allows you to override the default Start layout and prevents the user from changing it. If both user and device policies are set, the user policy will be used. Apps pinned to the taskbar can also be changed with this policy

For further details on how to customize the Start layout, please see Customize and export Start layout and Configure Windows 10 taskbar.

ADMX Info:

  • GP Friendly name: Start Layout
  • GP name: LockedStartLayout
  • GP path: Start Menu and Taskbar
  • GP ADMX file name: StartMenu.admx