2019-10-15 11:07:22 -07:00

152 KiB
Raw Blame History

title, description, ms.author, ms.topic, ms.prod, ms.technology, author, ms.date, ms.reviewer, manager
title description ms.author ms.topic ms.prod ms.technology author ms.date ms.reviewer manager
Policy CSP - Privacy Policy CSP - Privacy dansimp article w10 windows manikadhiman 09/27/2019 dansimp

Policy CSP - Privacy


Privacy policies

Privacy/AllowAutoAcceptPairingAndPrivacyConsentPrompts
Privacy/AllowCrossDeviceClipboard
Privacy/AllowInputPersonalization
Privacy/DisableAdvertisingId
Privacy/DisablePrivacyExperience
Privacy/EnableActivityFeed
Privacy/LetAppsAccessAccountInfo
Privacy/LetAppsAccessAccountInfo_ForceAllowTheseApps
Privacy/LetAppsAccessAccountInfo_ForceDenyTheseApps
Privacy/LetAppsAccessAccountInfo_UserInControlOfTheseApps
Privacy/LetAppsAccessBackgroundSpatialPerception
Privacy/LetAppsAccessBackgroundSpatialPerception_ForceAllowTheseApps
Privacy/LetAppsAccessBackgroundSpatialPerception_ForceDenyTheseApps
Privacy/LetAppsAccessBackgroundSpatialPerception_UserInControlOfTheseApps
Privacy/LetAppsAccessCalendar
Privacy/LetAppsAccessCalendar_ForceAllowTheseApps
Privacy/LetAppsAccessCalendar_ForceDenyTheseApps
Privacy/LetAppsAccessCalendar_UserInControlOfTheseApps
Privacy/LetAppsAccessCallHistory
Privacy/LetAppsAccessCallHistory_ForceAllowTheseApps
Privacy/LetAppsAccessCallHistory_ForceDenyTheseApps
Privacy/LetAppsAccessCallHistory_UserInControlOfTheseApps
Privacy/LetAppsAccessCamera
Privacy/LetAppsAccessCamera_ForceAllowTheseApps
Privacy/LetAppsAccessCamera_ForceDenyTheseApps
Privacy/LetAppsAccessCamera_UserInControlOfTheseApps
Privacy/LetAppsAccessContacts
Privacy/LetAppsAccessContacts_ForceAllowTheseApps
Privacy/LetAppsAccessContacts_ForceDenyTheseApps
Privacy/LetAppsAccessContacts_UserInControlOfTheseApps
Privacy/LetAppsAccessEmail
Privacy/LetAppsAccessEmail_ForceAllowTheseApps
Privacy/LetAppsAccessEmail_ForceDenyTheseApps
Privacy/LetAppsAccessEmail_UserInControlOfTheseApps
Privacy/LetAppsAccessGazeInput
Privacy/LetAppsAccessGazeInput_ForceAllowTheseApps
Privacy/LetAppsAccessGazeInput_ForceDenyTheseApps
Privacy/LetAppsAccessGazeInput_UserInControlOfTheseApps
Privacy/LetAppsAccessLocation
Privacy/LetAppsAccessLocation_ForceAllowTheseApps
Privacy/LetAppsAccessLocation_ForceDenyTheseApps
Privacy/LetAppsAccessLocation_UserInControlOfTheseApps
Privacy/LetAppsAccessMessaging
Privacy/LetAppsAccessMessaging_ForceAllowTheseApps
Privacy/LetAppsAccessMessaging_ForceDenyTheseApps
Privacy/LetAppsAccessMessaging_UserInControlOfTheseApps
Privacy/LetAppsAccessMicrophone
Privacy/LetAppsAccessMicrophone_ForceAllowTheseApps
Privacy/LetAppsAccessMicrophone_ForceDenyTheseApps
Privacy/LetAppsAccessMicrophone_UserInControlOfTheseApps
Privacy/LetAppsAccessMotion
Privacy/LetAppsAccessMotion_ForceAllowTheseApps
Privacy/LetAppsAccessMotion_ForceDenyTheseApps
Privacy/LetAppsAccessMotion_UserInControlOfTheseApps
Privacy/LetAppsAccessNotifications
Privacy/LetAppsAccessNotifications_ForceAllowTheseApps
Privacy/LetAppsAccessNotifications_ForceDenyTheseApps
Privacy/LetAppsAccessNotifications_UserInControlOfTheseApps
Privacy/LetAppsAccessPhone
Privacy/LetAppsAccessPhone_ForceAllowTheseApps
Privacy/LetAppsAccessPhone_ForceDenyTheseApps
Privacy/LetAppsAccessPhone_UserInControlOfTheseApps
Privacy/LetAppsAccessRadios
Privacy/LetAppsAccessRadios_ForceAllowTheseApps
Privacy/LetAppsAccessRadios_ForceDenyTheseApps
Privacy/LetAppsAccessRadios_UserInControlOfTheseApps
Privacy/LetAppsAccessTasks
Privacy/LetAppsAccessTasks_ForceAllowTheseApps
Privacy/LetAppsAccessTasks_ForceDenyTheseApps
Privacy/LetAppsAccessTasks_UserInControlOfTheseApps
Privacy/LetAppsAccessTrustedDevices
Privacy/LetAppsAccessTrustedDevices_ForceAllowTheseApps
Privacy/LetAppsAccessTrustedDevices_ForceDenyTheseApps
Privacy/LetAppsAccessTrustedDevices_UserInControlOfTheseApps
Privacy/LetAppsActivateWithVoice
Privacy/LetAppsActivateWithVoiceAboveLock
Privacy/LetAppsGetDiagnosticInfo
Privacy/LetAppsGetDiagnosticInfo_ForceAllowTheseApps
Privacy/LetAppsGetDiagnosticInfo_ForceDenyTheseApps
Privacy/LetAppsGetDiagnosticInfo_UserInControlOfTheseApps
Privacy/LetAppsRunInBackground
Privacy/LetAppsRunInBackground_ForceAllowTheseApps
Privacy/LetAppsRunInBackground_ForceDenyTheseApps
Privacy/LetAppsRunInBackground_UserInControlOfTheseApps
Privacy/LetAppsSyncWithDevices
Privacy/LetAppsSyncWithDevices_ForceAllowTheseApps
Privacy/LetAppsSyncWithDevices_ForceDenyTheseApps
Privacy/LetAppsSyncWithDevices_UserInControlOfTheseApps
Privacy/PublishUserActivities
Privacy/UploadUserActivities

Privacy/AllowAutoAcceptPairingAndPrivacyConsentPrompts

Windows Edition Supported?
Home check mark3
Pro check mark3
Business check mark3
Enterprise check mark3
Education check mark3

Scope:

[!div class = "checklist"]

  • Device

Allows or disallows the automatic acceptance of the pairing and privacy user consent dialog when launching apps.

Note

There were issues reported with the previous release of this policy and a fix was added in Windows 10, version 1709.

Most restricted value is 0.

The following list shows the supported values:

  • 0 (default) Not allowed.
  • 1 Allowed.

Privacy/AllowCrossDeviceClipboard

Windows Edition Supported?
Home check mark5
Pro check mark5
Business check mark5
Enterprise check mark5
Education check mark5

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1809. Specifies whether clipboard items roam across devices. When this is allowed, an item copied to the clipboard is uploaded to the cloud so that other devices can access. Also, when this is allowed, a new clipboard item on the cloud is downloaded to a device so that user can paste on the device.

Most restricted value is 0.

ADMX Info:

  • GP English name: Allow Clipboard synchronization across devices
  • GP name: AllowCrossDeviceClipboard
  • GP path: System/OS Policies
  • GP ADMX file name: OSPolicy.admx

The following list shows the supported values:

0 Not allowed. 1 (default) Allowed.


Privacy/AllowInputPersonalization

Windows Edition Supported?
Home check mark
Pro check mark
Business check mark
Enterprise check mark
Education check mark

Scope:

[!div class = "checklist"]

  • Device

Updated in Windows 10, version 1809. This policy specifies whether users on the device have the option to enable online speech recognition. When enabled, users can use their voice for dictation and to talk to Cortana and other apps that use Microsoft cloud-based speech recognition. Microsoft will use voice input to help improve our speech services. If the policy value is set to 0, online speech recognition will be disabled and users cannot enable online speech recognition via settings. If policy value is set to 1 or is not configured, control is deferred to users.

Most restricted value is 0.

ADMX Info:

  • GP English name: Allow input personalization
  • GP name: AllowInputPersonalization
  • GP path: Control Panel/Regional and Language Options
  • GP ADMX file name: Globalization.admx

The following list shows the supported values:

  • 0 Not allowed.
  • 1 (default) Choice deferred to user's preference.

Privacy/DisableAdvertisingId

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. Enables or disables the Advertising ID.

Most restricted value is 0.

ADMX Info:

  • GP English name: Turn off the advertising ID
  • GP name: DisableAdvertisingId
  • GP path: System/User Profiles
  • GP ADMX file name: UserProfiles.admx

The following list shows the supported values:

  • 0 Disabled.
  • 1 Enabled.
  • 65535 (default)- Not configured.

Privacy/DisablePrivacyExperience

Windows Edition Supported?
Home check mark5
Pro check mark5
Business check mark5
Enterprise check mark5
Education check mark5

Scope:

[!div class = "checklist"]

  • User
  • Device

Enabling this policy prevents the privacy experience from launching during user logon for new and upgraded users.

Value type is integer.

  • 0 (default) - Allow the "choose privacy settings for your device" screen for a new user during their first logon or when an existing user logs in for the first time after an upgrade.
  • 1 - Do not allow the "choose privacy settings for your device" screen when a new user logs in or an existing user logs in for the first time after an upgrade.

In some enterprise managed environments, the privacy settings may be set by policies. In these cases, you can use this policy if you do not want to show a screen that would prompt your users to change these privacy settings.

ADMX Info:

  • GP English name: Don't launch privacy settings experience on user logon
  • GP name: DisablePrivacyExperience
  • GP path: Windows Components/OOBE
  • GP ADMX file name: OOBE.admx

Privacy/EnableActivityFeed

Windows Edition Supported?
Home check mark3
Pro check mark3
Business check mark3
Enterprise check mark3
Education check mark3

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1709. Allows IT Admins to allow Apps/OS to publish to the activity feed.

ADMX Info:

  • GP English name: Enables Activity Feed
  • GP name: EnableActivityFeed
  • GP path: System/OS Policies
  • GP ADMX file name: OSPolicy.admx

The following list shows the supported values:

  • 0 Disabled. Apps/OS can't publish the activities and roaming is disabled. (not published to the cloud).
  • 1 (default) Enabled. Apps/OS can publish the activities and will be roamed across device graph.

Privacy/LetAppsAccessAccountInfo

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access account information.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access account information
  • GP name: LetAppsAccessAccountInfo
  • GP element: LetAppsAccessAccountInfo_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 User in control.
  • 1 Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessAccountInfo_ForceAllowTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are allowed access to account information. This setting overrides the default LetAppsAccessAccountInfo policy setting for the specified Windows apps.

ADMX Info:

  • GP English name: Let Windows apps access account information
  • GP name: LetAppsAccessAccountInfo
  • GP element: LetAppsAccessAccountInfo_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessAccountInfo_ForceDenyTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are denied access to account information. This setting overrides the default LetAppsAccessAccountInfo policy setting for the specified Windows apps.

ADMX Info:

  • GP English name: Let Windows apps access account information
  • GP name: LetAppsAccessAccountInfo
  • GP element: LetAppsAccessAccountInfo_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessAccountInfo_UserInControlOfTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows apps. The user is able to control the account information privacy setting for the listed Windows apps. This setting overrides the default LetAppsAccessAccountInfo policy setting for the specified Windows apps.

ADMX Info:

  • GP English name: Let Windows apps access account information
  • GP name: LetAppsAccessAccountInfo
  • GP element: LetAppsAccessAccountInfo_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessBackgroundSpatialPerception

Windows Edition Supported?
Home cross mark
Pro cross mark
Business cross mark
Enterprise cross mark
Education cross mark

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1903.

Note

Currently, this policy is supported only in HoloLens 2.

Specifies whether Windows apps can access the movement of the user's head, hands, motion controllers, and other tracked objects, while the apps are running in the background.

Value type is integer.

ADMX Info:

  • GP English name: Let Windows apps access background spatial perception
  • GP name: LetAppsAccessBackgroundSpatialPerception
  • GP element: LetAppsAccessBackgroundSpatialPerception_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 (default) User in control.
  • 1 Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessBackgroundSpatialPerception_ForceAllowTheseApps

Windows Edition Supported?
Home cross mark
Pro cross mark
Business cross mark
Enterprise cross mark
Education cross mark

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1903.

Note

Currently, this policy is supported only in HoloLens 2.

List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to the user's movements while the apps are running in the background. This setting overrides the default LetAppsAccessBackgroundSpatialPerception policy setting for the specified apps.

Value type is chr.

ADMX Info:

  • GP English name: Let Windows apps access background spatial perception
  • GP name: LetAppsAccessBackgroundSpatialPerception
  • GP element: LetAppsAccessBackgroundSpatialPerception_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessBackgroundSpatialPerception_ForceDenyTheseApps

Windows Edition Supported?
Home cross mark
Pro cross mark
Business cross mark
Enterprise cross mark
Education cross mark

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1903.

Note

Currently, this policy is supported only in HoloLens 2.

List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to the user's movements while the apps are running in the background. This setting overrides the default LetAppsAccessBackgroundSpatialPerception policy setting for the specified apps.

Value type is chr.

ADMX Info:

  • GP English name: Let Windows apps access background spatial perception
  • GP name: LetAppsAccessBackgroundSpatialPerception
  • GP element: LetAppsAccessBackgroundSpatialPerception_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessBackgroundSpatialPerception_UserInControlOfTheseApps

Windows Edition Supported?
Home cross mark
Pro cross mark
Business cross mark
Enterprise cross mark
Education cross mark

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1903.

Note

Currently, this policy is supported only in HoloLens 2.

List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the user movements privacy setting for the listed apps. This setting overrides the default LetAppsAccessBackgroundSpatialPerception policy setting for the specified apps.

Value type is chr.

ADMX Info:

  • GP English name: Let Windows apps access background spatial perception
  • GP name: LetAppsAccessBackgroundSpatialPerception
  • GP element: LetAppsAccessBackgroundSpatialPerception_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCalendar

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access the calendar.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access the calendar
  • GP name: LetAppsAccessCalendar
  • GP element: LetAppsAccessCalendar_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 User in control.
  • 1 Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessCalendar_ForceAllowTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are allowed access to the calendar. This setting overrides the default LetAppsAccessCalendar policy setting for the specified Windows apps.

ADMX Info:

  • GP English name: Let Windows apps access the calendar
  • GP name: LetAppsAccessCalendar
  • GP element: LetAppsAccessCalendar_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCalendar_ForceDenyTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are denied access to the calendar. This setting overrides the default LetAppsAccessCalendar policy setting for the specified Windows apps.

ADMX Info:

  • GP English name: Let Windows apps access the calendar
  • GP name: LetAppsAccessCalendar
  • GP element: LetAppsAccessCalendar_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCalendar_UserInControlOfTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows apps. The user is able to control the calendar privacy setting for the listed Windows apps. This setting overrides the default LetAppsAccessCalendar policy setting for the specified Windows apps.

ADMX Info:

  • GP English name: Let Windows apps access the calendar
  • GP name: LetAppsAccessCalendar
  • GP element: LetAppsAccessCalendar_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCallHistory

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access call history.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access call history
  • GP name: LetAppsAccessCallHistory
  • GP element: LetAppsAccessCallHistory_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 User in control.
  • 1 Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessCallHistory_ForceAllowTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are allowed access to call history. This setting overrides the default LetAppsAccessCallHistory policy setting for the specified Windows apps.

ADMX Info:

  • GP English name: Let Windows apps access call history
  • GP name: LetAppsAccessCallHistory
  • GP element: LetAppsAccessCallHistory_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCallHistory_ForceDenyTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are denied access to call history. This setting overrides the default LetAppsAccessCallHistory policy setting for the specified Windows apps.

ADMX Info:

  • GP English name: Let Windows apps access call history
  • GP name: LetAppsAccessCallHistory
  • GP element: LetAppsAccessCallHistory_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCallHistory_UserInControlOfTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows apps. The user is able to control the call history privacy setting for the listed Windows apps. This setting overrides the default LetAppsAccessCallHistory policy setting for the specified Windows apps.

ADMX Info:

  • GP English name: Let Windows apps access call history
  • GP name: LetAppsAccessCallHistory
  • GP element: LetAppsAccessCallHistory_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCamera

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access the camera.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access the camera
  • GP name: LetAppsAccessCamera
  • GP element: LetAppsAccessCamera_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 User in control.
  • 1 Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessCamera_ForceAllowTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access the camera
  • GP name: LetAppsAccessCamera
  • GP element: LetAppsAccessCamera_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCamera_ForceDenyTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access the camera
  • GP name: LetAppsAccessCamera
  • GP element: LetAppsAccessCamera_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCamera_UserInControlOfTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the camera privacy setting for the listed apps. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access the camera
  • GP name: LetAppsAccessCamera
  • GP element: LetAppsAccessCamera_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessContacts

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access contacts.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access contacts
  • GP name: LetAppsAccessContacts
  • GP element: LetAppsAccessContacts_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 User in control.
  • 1 Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessContacts_ForceAllowTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access contacts
  • GP name: LetAppsAccessContacts
  • GP element: LetAppsAccessContacts_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessContacts_ForceDenyTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access contacts
  • GP name: LetAppsAccessContacts
  • GP element: LetAppsAccessContacts_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessContacts_UserInControlOfTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the contacts privacy setting for the listed apps. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access contacts
  • GP name: LetAppsAccessContacts
  • GP element: LetAppsAccessContacts_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessEmail

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access email.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access email
  • GP name: LetAppsAccessEmail
  • GP element: LetAppsAccessEmail_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 User in control.
  • 1 Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessEmail_ForceAllowTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access email
  • GP name: LetAppsAccessEmail
  • GP element: LetAppsAccessEmail_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessEmail_ForceDenyTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access email
  • GP name: LetAppsAccessEmail
  • GP element: LetAppsAccessEmail_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessEmail_UserInControlOfTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the email privacy setting for the listed apps. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access email
  • GP name: LetAppsAccessEmail
  • GP element: LetAppsAccessEmail_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessGazeInput

Windows Edition Supported?
Home check mark5
Pro check mark5
Business check mark5
Enterprise check mark5
Education check mark5

Scope:

[!div class = "checklist"]

  • Device

This policy setting specifies whether Windows apps can access the eye tracker.


Privacy/LetAppsAccessGazeInput_ForceAllowTheseApps

Windows Edition Supported?
Home check mark5
Pro check mark5
Business check mark5
Enterprise check mark5
Education check mark5

Scope:

[!div class = "checklist"]

  • Device

List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to the eye tracker. This setting overrides the default LetAppsAccessGazeInput policy setting for the specified apps.


Privacy/LetAppsAccessGazeInput_ForceDenyTheseApps

Windows Edition Supported?
Home check mark5
Pro check mark5
Business check mark5
Enterprise check mark5
Education check mark5

Scope:

[!div class = "checklist"]

  • Device

List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to the eye tracker. This setting overrides the default LetAppsAccessGazeInput policy setting for the specified apps.


Privacy/LetAppsAccessGazeInput_UserInControlOfTheseApps

Windows Edition Supported?
Home check mark5
Pro check mark5
Business check mark5
Enterprise check mark5
Education check mark5

Scope:

[!div class = "checklist"]

  • Device

List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the eye tracker privacy setting for the listed apps. This setting overrides the default LetAppsAccessGazeInput policy setting for the specified apps.


Privacy/LetAppsAccessLocation

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access location.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access location
  • GP name: LetAppsAccessLocation
  • GP element: LetAppsAccessLocation_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 User in control.
  • 1 Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessLocation_ForceAllowTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access location
  • GP name: LetAppsAccessLocation
  • GP element: LetAppsAccessLocation_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessLocation_ForceDenyTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access location
  • GP name: LetAppsAccessLocation
  • GP element: LetAppsAccessLocation_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessLocation_UserInControlOfTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the location privacy setting for the listed apps. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access location
  • GP name: LetAppsAccessLocation
  • GP element: LetAppsAccessLocation_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMessaging

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can read or send messages (text or MMS).

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access messaging
  • GP name: LetAppsAccessMessaging
  • GP element: LetAppsAccessMessaging_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 User in control.
  • 1 Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessMessaging_ForceAllowTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access messaging
  • GP name: LetAppsAccessMessaging
  • GP element: LetAppsAccessMessaging_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMessaging_ForceDenyTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are not allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access messaging
  • GP name: LetAppsAccessMessaging
  • GP element: LetAppsAccessMessaging_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMessaging_UserInControlOfTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the messaging privacy setting for the listed apps. This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access messaging
  • GP name: LetAppsAccessMessaging
  • GP element: LetAppsAccessMessaging_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMicrophone

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access the microphone.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access the microphone
  • GP name: LetAppsAccessMicrophone
  • GP element: LetAppsAccessMicrophone_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 User in control.
  • 1 Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessMicrophone_ForceAllowTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access the microphone
  • GP name: LetAppsAccessMicrophone
  • GP element: LetAppsAccessMicrophone_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMicrophone_ForceDenyTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access the microphone
  • GP name: LetAppsAccessMicrophone
  • GP element: LetAppsAccessMicrophone_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMicrophone_UserInControlOfTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the microphone privacy setting for the listed apps. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access the microphone
  • GP name: LetAppsAccessMicrophone
  • GP element: LetAppsAccessMicrophone_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMotion

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access motion data.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access motion
  • GP name: LetAppsAccessMotion
  • GP element: LetAppsAccessMotion_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 User in control.
  • 1 Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessMotion_ForceAllowTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access motion
  • GP name: LetAppsAccessMotion
  • GP element: LetAppsAccessMotion_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMotion_ForceDenyTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access motion
  • GP name: LetAppsAccessMotion
  • GP element: LetAppsAccessMotion_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMotion_UserInControlOfTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the motion privacy setting for the listed apps. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access motion
  • GP name: LetAppsAccessMotion
  • GP element: LetAppsAccessMotion_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessNotifications

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access notifications.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access notifications
  • GP name: LetAppsAccessNotifications
  • GP element: LetAppsAccessNotifications_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 User in control.
  • 1 Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessNotifications_ForceAllowTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access notifications
  • GP name: LetAppsAccessNotifications
  • GP element: LetAppsAccessNotifications_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessNotifications_ForceDenyTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access notifications
  • GP name: LetAppsAccessNotifications
  • GP element: LetAppsAccessNotifications_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessNotifications_UserInControlOfTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the notifications privacy setting for the listed apps. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access notifications
  • GP name: LetAppsAccessNotifications
  • GP element: LetAppsAccessNotifications_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessPhone

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can make phone calls.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps make phone calls
  • GP name: LetAppsAccessPhone
  • GP element: LetAppsAccessPhone_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 User in control.
  • 1 Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessPhone_ForceAllowTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps make phone calls
  • GP name: LetAppsAccessPhone
  • GP element: LetAppsAccessPhone_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessPhone_ForceDenyTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are not allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps make phone calls
  • GP name: LetAppsAccessPhone
  • GP element: LetAppsAccessPhone_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessPhone_UserInControlOfTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the phone call privacy setting for the listed apps. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps make phone calls
  • GP name: LetAppsAccessPhone
  • GP element: LetAppsAccessPhone_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessRadios

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps have access to control radios.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps control radios
  • GP name: LetAppsAccessRadios
  • GP element: LetAppsAccessRadios_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 User in control.
  • 1 Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessRadios_ForceAllowTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps control radios
  • GP name: LetAppsAccessRadios
  • GP element: LetAppsAccessRadios_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessRadios_ForceDenyTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps control radios
  • GP name: LetAppsAccessRadios
  • GP element: LetAppsAccessRadios_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessRadios_UserInControlOfTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the radios privacy setting for the listed apps. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps control radios
  • GP name: LetAppsAccessRadios
  • GP element: LetAppsAccessRadios_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTasks

Windows Edition Supported?
Home check mark2
Pro check mark2
Business check mark2
Enterprise check mark2
Education check mark2

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1703. Specifies whether Windows apps can access tasks.

ADMX Info:

  • GP English name: Let Windows apps access Tasks
  • GP name: LetAppsAccessTasks
  • GP element: LetAppsAccessTasks_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTasks_ForceAllowTheseApps

Windows Edition Supported?
Home check mark2
Pro check mark2
Business check mark2
Enterprise check mark2
Education check mark2

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access Tasks
  • GP name: LetAppsAccessTasks
  • GP element: LetAppsAccessTasks_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTasks_ForceDenyTheseApps

Windows Edition Supported?
Home check mark2
Pro check mark2
Business check mark2
Enterprise check mark2
Education check mark2

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access Tasks
  • GP name: LetAppsAccessTasks
  • GP element: LetAppsAccessTasks_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTasks_UserInControlOfTheseApps

Windows Edition Supported?
Home check mark2
Pro check mark2
Business check mark2
Enterprise check mark2
Education check mark2

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the tasks privacy setting for the listed apps. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access Tasks
  • GP name: LetAppsAccessTasks
  • GP element: LetAppsAccessTasks_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTrustedDevices

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access trusted devices.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access trusted devices
  • GP name: LetAppsAccessTrustedDevices
  • GP element: LetAppsAccessTrustedDevices_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 User in control.
  • 1 Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessTrustedDevices_ForceAllowTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access trusted devices
  • GP name: LetAppsAccessTrustedDevices
  • GP element: LetAppsAccessTrustedDevices_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTrustedDevices_ForceDenyTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access trusted devices
  • GP name: LetAppsAccessTrustedDevices
  • GP element: LetAppsAccessTrustedDevices_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTrustedDevices_UserInControlOfTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'trusted devices' privacy setting for the listed apps. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access trusted devices
  • GP name: LetAppsAccessTrustedDevices
  • GP element: LetAppsAccessTrustedDevices_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsActivateWithVoice

Windows Edition Supported?
Home check mark6
Pro check mark6
Business check mark6
Enterprise check mark6
Education check mark6

Scope:

[!div class = "checklist"]

  • Device

Specifies if Windows apps can be activated by voice.

ADMX Info:

  • GP English name: Allow voice activation
  • GP name: LetAppsActivateWithVoice
  • GP element: LetAppsActivateWithVoice_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 (default) User in control. Users can decide if Windows apps can be activated by voice using Settings > Privacy options on the device.
  • 1 Force allow. Windows apps can be activated by voice and users cannot change it.
  • 2 - Force deny. Windows apps cannot be activated by voice and users cannot change it.

Privacy/LetAppsActivateWithVoiceAboveLock

Windows Edition Supported?
Home check mark6
Pro check mark6
Business check mark6
Enterprise check mark6
Education check mark6

Scope:

[!div class = "checklist"]

  • Device

Specifies if Windows apps can be activated by voice while the screen is locked.

ADMX Info:

  • GP English name: Allow voice activation above locked screen
  • GP name: LetAppsActivateWithVoiceAboveLock
  • GP element: LetAppsActivateWithVoiceAboveLock_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 (default) User in control. Users can decide if Windows apps can be activated by voice while the screen is locked using Settings > Privacy options on the device.
  • 1 Force allow. Windows apps can be activated by voice while the screen is locked, and users cannot change it.
  • 2 - Force deny. Windows apps cannot be activated by voice while the screen is locked, and users cannot change it.

Privacy/LetAppsGetDiagnosticInfo

Windows Edition Supported?
Home check mark2
Pro check mark2
Business check mark2
Enterprise check mark2
Education check mark2

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1703. Force allow, force deny or give user control of apps that can get diagnostic information about other running apps.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access diagnostic information about other apps
  • GP name: LetAppsGetDiagnosticInfo
  • GP element: LetAppsGetDiagnosticInfo_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 User in control.
  • 1 Force allow.
  • 2 - Force deny.

Privacy/LetAppsGetDiagnosticInfo_ForceAllowTheseApps

Windows Edition Supported?
Home check mark2
Pro check mark2
Business check mark2
Enterprise check mark2
Education check mark2

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to diagnostic information about other running apps. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access diagnostic information about other apps
  • GP name: LetAppsGetDiagnosticInfo
  • GP element: LetAppsGetDiagnosticInfo_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsGetDiagnosticInfo_ForceDenyTheseApps

Windows Edition Supported?
Home check mark2
Pro check mark2
Business check mark2
Enterprise check mark2
Education check mark2

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to diagnostic information about other running apps. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access diagnostic information about other apps
  • GP name: LetAppsGetDiagnosticInfo
  • GP element: LetAppsGetDiagnosticInfo_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsGetDiagnosticInfo_UserInControlOfTheseApps

Windows Edition Supported?
Home check mark2
Pro check mark2
Business check mark2
Enterprise check mark2
Education check mark2

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'get diagnostic info' privacy setting for the listed apps. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access diagnostic information about other apps
  • GP name: LetAppsGetDiagnosticInfo
  • GP element: LetAppsGetDiagnosticInfo_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsRunInBackground

Windows Edition Supported?
Home check mark2
Pro check mark2
Business check mark2
Enterprise check mark2
Education check mark2

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1703. Specifies whether Windows apps can run in the background.

Most restricted value is 2.

Warning

Be careful when determining which apps should have their background activity disabled. Communication apps normally update tiles and notifications through background processes. Turning off background activity for these types of apps could cause text message, email, and voicemail notifications to not function. This could also cause background email syncing to not function properly.

ADMX Info:

  • GP English name: Let Windows apps run in the background
  • GP name: LetAppsRunInBackground
  • GP element: LetAppsRunInBackground_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 User in control (default).
  • 1 Force allow.
  • 2 - Force deny.

Privacy/LetAppsRunInBackground_ForceAllowTheseApps

Windows Edition Supported?
Home check mark2
Pro check mark2
Business check mark2
Enterprise check mark2
Education check mark2

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are able to run in the background. This setting overrides the default LetAppsRunInBackground policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps run in the background
  • GP name: LetAppsRunInBackground
  • GP element: LetAppsRunInBackground_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsRunInBackground_ForceDenyTheseApps

Windows Edition Supported?
Home check mark2
Pro check mark2
Business check mark2
Enterprise check mark2
Education check mark2

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied the ability to run in the background. This setting overrides the default LetAppsRunInBackground policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps run in the background
  • GP name: LetAppsRunInBackground
  • GP element: LetAppsRunInBackground_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsRunInBackground_UserInControlOfTheseApps

Windows Edition Supported?
Home check mark2
Pro check mark2
Business check mark2
Enterprise check mark2
Education check mark2

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the background apps privacy setting for the listed apps. This setting overrides the default LetAppsRunInBackground policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps run in the background
  • GP name: LetAppsRunInBackground
  • GP element: LetAppsRunInBackground_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsSyncWithDevices

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can sync with devices.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps communicate with unpaired devices
  • GP name: LetAppsSyncWithDevices
  • GP element: LetAppsSyncWithDevices_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 User in control.
  • 1 Force allow.
  • 2 - Force deny.

Privacy/LetAppsSyncWithDevices_ForceAllowTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to sync with devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps communicate with unpaired devices
  • GP name: LetAppsSyncWithDevices
  • GP element: LetAppsSyncWithDevices_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsSyncWithDevices_ForceDenyTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to sync with devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps communicate with unpaired devices
  • GP name: LetAppsSyncWithDevices
  • GP element: LetAppsSyncWithDevices_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsSyncWithDevices_UserInControlOfTheseApps

Windows Edition Supported?
Home check mark1
Pro check mark1
Business check mark1
Enterprise check mark1
Education check mark1

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'sync with devices' privacy setting for the listed apps. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps communicate with unpaired devices
  • GP name: LetAppsSyncWithDevices
  • GP element: LetAppsSyncWithDevices_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/PublishUserActivities

Windows Edition Supported?
Home check mark3
Pro check mark3
Business check mark3
Enterprise check mark3
Education check mark3

Scope:

[!div class = "checklist"]

  • Device

Added in Windows 10, version 1709. Allows It Admins to enable publishing of user activities to the activity feed.

ADMX Info:

  • GP English name: Allow publishing of User Activities
  • GP name: PublishUserActivities
  • GP path: System/OS Policies
  • GP ADMX file name: OSPolicy.admx

The following list shows the supported values:

  • 0 Disabled. Apps/OS can't publish the user activities.
  • 1 (default) Enabled. Apps/OS can publish the user activities.

Privacy/UploadUserActivities

Windows Edition Supported?
Home check mark5
Pro check mark5
Business check mark5
Enterprise check mark5
Education check mark5

Scope:

[!div class = "checklist"]

  • Device

Allows ActivityFeed to upload published 'User Activities'.

ADMX Info:

  • GP English name: Allow upload of User Activities
  • GP name: UploadUserActivities
  • GP path: System/OS Policies
  • GP ADMX file name: OSPolicy.admx

Footnotes:

  • 1 - Added in Windows 10, version 1607.
  • 2 - Added in Windows 10, version 1703.
  • 3 - Added in Windows 10, version 1709.
  • 4 - Added in Windows 10, version 1803.
  • 5 - Added in Windows 10, version 1809.
  • 6 - Added in Windows 10, version 1903.