windows-itpro-docs/education/windows/windows-11-se-settings-list.md
Chris J. Lin ef1c69b439
Release mcc ent (#1)
* smb adds

* smb adds

* formatting

* private preview and support content

* edit removed and dep

* Fix blocking issues

* Acro-fix

* 24H2 CSP Updates

* Fix link

* fix link in dep page

* edit

* edit index file

* syntax-fix-24h2

* ltsc-edits

* ltsc-edits

* lichris-docs-1

* Acrolinx improvements

* refresh for maxado-8631996

* update link for maxado-8631993

* additional edits, acrolinx

* ltsc-tw

* contentsource-8914508

* contentsource-8914508

* Updates for 1 October release

* Set stale debug to false

* update gp link for 24h2

* additional changes

* Changes to updates, acrolinx changes

* fixes broken links

* Fixed alignment issues

* updates from Rafal

* fixed acrolinx

* so many link fixes

* added release notes and troubleshoot content

* updates

* Update security-compliance-toolkit-10.md

Added Windows 11 24H2

* Update get-support-for-security-baselines.md

Updated for Windows 11 24H2

* bump date

* bump date

* fix pde comment

* fixing broken link

* Fix broken redirections

* fix to rel link

* reset head, fix link

* add cli to deploy, add script to cli

* removing "mcce"

* edits to create page

* Update default and global release policies OS version and dates to latest release values

* emoved e from mcce and other changes

* updated example script

* added important notice to update page

* more update page changes

* clarified how proxy configuration is used

* anonymizing variables in example script

* revise example script

* acrolinx fixes to update page

* changes to other pages and content in overview page

* Update broken link

Update broken link

* Update windows-sandbox-configure-using-wsb-file.md

Update `HostFolder` value description in `MappedFolder`, specifying that the path could be absolute or relative, not only absolute as, instead, is for the `SandboxFolder` value.

* Remove bad link

Removed bad link. There is already a second link referring to content so no need to replace the link.

* docfx update for security book

* Correct TOC entry changing Windows 10 to Windows

* Update whats-new-do.md

- Vpn to VPN
- Minor improvements

* Updated date for freshness reporting

* Add EOS callout

Fix some obvious Acrolinx issues

* Fixed typo added clarity

* Update mcc-ent-deploy-to-windows.md

* Update .openpublishing.redirection.windows-deployment.json

* Update .openpublishing.redirection.windows-deployment.json

* Update policy-csp-localpoliciessecurityoptions.md

* Correct indentation and spacing

* Acrolinx: "Enteprise"

* Update mcc-ent-edu-overview.md

* refresh

* Remove redirection and final bits of store-for-business

store-for-business, AKA /microsoft-store/, is retired, and the content is archived in officearchive-pr. This archival was for ADO task 9268422.

* added support content and other changes

* fixed tabs

* fixed tabs

* Updated device reg policy and group information

* Update delivery-optimization-endpoints.md

Added a line item in MCC table for Outlook *res.cdn.office.net requirement

* freshness review

* Fix broken links

* Minor change

* content for faq

* changes to landing page

* more content to faqs

* pencil edit

* add copilot exps link

* edits and ren cli file temporarily

* ren file back and edit toc to lowercase

* edit

* edit

* edit

* Update windows-autopatch-configure-network.md

Adding a new network endpoint required for the service 'device.autopatch.microsoft.com' @tiaraquan

* Clarify some points and remove data that is confusing to customers.

* fix syntax

* Sentence correction

* Update windows/deployment/do/waas-delivery-optimization-faq.yml

Co-authored-by: Meghan Stewart <33289333+mestew@users.noreply.github.com>

* Update windows/deployment/do/waas-delivery-optimization-faq.yml

Co-authored-by: Meghan Stewart <33289333+mestew@users.noreply.github.com>

* moved shortcuts under policy settings article

---------

Co-authored-by: Alma Jenks <v-alje@microsoft.com>
Co-authored-by: Meghan Stewart <33289333+mestew@users.noreply.github.com>
Co-authored-by: Stacyrch140 <102548089+Stacyrch140@users.noreply.github.com>
Co-authored-by: Nidhi Doshi <77081571+doshnid@users.noreply.github.com>
Co-authored-by: Gary Moore <5432776+garycentric@users.noreply.github.com>
Co-authored-by: Vinay Pamnani (from Dev Box) <vinpa@microsoft.com>
Co-authored-by: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com>
Co-authored-by: Aaron Czechowski <aczechowski@users.noreply.github.com>
Co-authored-by: Aditi Srivastava <133841950+aditisrivastava07@users.noreply.github.com>
Co-authored-by: Daniel H. Brown <32883970+DHB-MSFT@users.noreply.github.com>
Co-authored-by: David Strome <21028455+dstrome@users.noreply.github.com>
Co-authored-by: Padma Jayaraman <v-padmaj@microsoft.com>
Co-authored-by: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com>
Co-authored-by: Rebecca Agiewich <16087112+rjagiewich@users.noreply.github.com>
Co-authored-by: Rick Munck <33725928+jmunck@users.noreply.github.com>
Co-authored-by: Tanaka <Huios@users.noreply.github.com>
Co-authored-by: Tiara Quan <95256667+tiaraquan@users.noreply.github.com>
Co-authored-by: Frank Rojas <45807133+frankroj@users.noreply.github.com>
Co-authored-by: Davide Piccinini <davide.piccinini.95@gmail.com>
Co-authored-by: Phil Garcia <phil@thinkedge.com>
Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com>
Co-authored-by: tiaraquan <tiaraquan@microsoft.com>
Co-authored-by: Caitlin Hart <caithart@microsoft.com>
Co-authored-by: Harman Thind <63820404+hathin@users.noreply.github.com>
Co-authored-by: [cmknox] <[cmknox@gmail.com]>
Co-authored-by: Carmen Forsmann <cmforsmann@live.com>
2024-10-17 11:34:07 -07:00

6.1 KiB

title, description, ms.topic, ms.date, appliesto, ms.collection
title description ms.topic ms.date appliesto ms.collection
Windows 11 SE settings list Windows 11 SE automatically configures settings in the operating system. Learn more about the settings you can control and manage, and the settings you can't change. reference 10/10/2024
<a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 11 SE</a>
education
tier1

Windows 11 SE for Education settings list

Windows 11 SE automatically configures certain settings and features in the operating system. You can use Microsoft Intune to customize these settings.

This article lists the settings automatically configured. For more information on Windows 11 SE, see Windows 11 SE for Education overview.

Settings that can be changed

The following table lists and describes the settings that can be changed by administrators.

Setting Description Default Value
Block manual unenrollment When blocked, users can't unenroll their devices from device management services.

Experience/AllowManualMDMUnenrollment CSP
Blocked
Allow option to Show Network When allowed, it gives users the option to see the Show Network folder in File Explorer. Allowed
Allow option to Show This PC When allowed, it gives users the option to see the Show This PC folder in File Explorer. Allowed
Set Allowed Folder location Gives user access to these folders. Default folders: Documents, Desktop, Pictures, and Downloads
Set Allowed Storage Locations Blocks user access to these storage locations. Blocks local drives and network drives
Allow News and Interests Hides widgets. Hide
Disable advertising ID Blocks apps from using usage data to tailor advertisements.

Privacy/DisableAdvertisingId CSP
Disabled
Visible settings pages Default:

Enable App Install Control When enabled, users can't download apps from the internet.

SmartScreen/EnableAppInstallControl CSP
Enabled
Configure Storage Sense Cloud Content Dehydration Threshold If a file hasn't been opened in 30 days, it becomes an online-only file. Online-only files can be opened when there's an internet connection. When an online-only file is opened on a device, it downloads and becomes locally available on that device. The file is available until it's unopened for the specified number of days, and becomes online-only again.

Storage/ConfigStorageSenseCloudContentDehydrationThreshold CSP
30 days
Allow Telemetry With Required Telemetry Only, it sends only basic device info, including quality-related data, app compatibility, and similar data to keep the device secure and up-to-date.

System/AllowTelemetry CSP
Required Telemetry Only
Allow Experimentation When disabled, Microsoft can't experiment with the product to study user preferences or device behavior.

System/AllowExperimentation CSP
Disabled
Block external extensions When blocked, in Microsoft Edge users can't install external extensions.

BlockExternalExtensions
Blocked
Configure new tab page Set the new tab page defaults to a specific url.

Configure the new tab page URL
Office.com
Configure homepage Set the Microsoft Edge's homepage default.

HomepageIsNewTabPage
Office.com
Prevent SmartScreen prompt override When enabled, in Microsoft Edge, users can't override Windows Defender SmartScreen warnings.

PreventSmartScreenPromptOverride
Enabled
Wallpaper Image Customization Specify a jpg, jpeg, or png image to be used as the desktop image. This setting can take an http or https URL to a remote image to be downloaded, a file URL to a local image.

DesktopImageUrl
Not configured
Lock Screen Image Customization Specify a jpg, jpeg, or png image to be used as lock screen image. This setting can take an http or https URL to a remote image to be downloaded, a file URL to a local image.

LockScreenImageUrl
Not configured

Settings that can't be changed

The following settings can't be changed.

Category Description
Visible Folders in File Explorer By default, the Desktop, Downloads, Documents, and Pictures folders are visible to users in File Explorer. Users can make other folders, like This PC, visible in View > Options.
Launch Windows Maximized All Windows are opened in the maximized view.
Windows Snapping Windows snapping is limited to two Windows.
Allowed Account Types Microsoft accounts and Microsoft Entra accounts are allowed.
Virtual Desktops Virtual Desktops are blocked.
Microsoft Store The Microsoft Store is blocked.
Administrative tools Administrative tools, such as the command prompt and Windows PowerShell, can't be opened. Windows PowerShell scripts deployed using Microsoft Intune can run.
Apps Only certain apps are allowed to run on Windows 11 SE. For more info on what apps can run on Windows 11 SE, see Windows 11 SE for Education overview.

Next steps

Windows 11 SE for Education overview