mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-12 05:17:22 +00:00
367 lines
18 KiB
Markdown
367 lines
18 KiB
Markdown
---
|
|
title: Cellular Policy CSP
|
|
description: Learn more about the Cellular Area in Policy CSP.
|
|
ms.date: 01/18/2024
|
|
---
|
|
|
|
<!-- Auto-Generated CSP Document -->
|
|
|
|
<!-- Cellular-Begin -->
|
|
# Policy CSP - Cellular
|
|
|
|
[!INCLUDE [ADMX-backed CSP tip](includes/mdm-admx-csp-note.md)]
|
|
|
|
<!-- Cellular-Editable-Begin -->
|
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
|
<!-- Cellular-Editable-End -->
|
|
|
|
<!-- LetAppsAccessCellularData-Begin -->
|
|
## LetAppsAccessCellularData
|
|
|
|
<!-- LetAppsAccessCellularData-Applicability-Begin -->
|
|
| Scope | Editions | Applicable OS |
|
|
|:--|:--|:--|
|
|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1709 [10.0.16299] and later |
|
|
<!-- LetAppsAccessCellularData-Applicability-End -->
|
|
|
|
<!-- LetAppsAccessCellularData-OmaUri-Begin -->
|
|
```Device
|
|
./Device/Vendor/MSFT/Policy/Config/Cellular/LetAppsAccessCellularData
|
|
```
|
|
<!-- LetAppsAccessCellularData-OmaUri-End -->
|
|
|
|
<!-- LetAppsAccessCellularData-Description-Begin -->
|
|
<!-- Description-Source-ADMX -->
|
|
This policy setting specifies whether Windows apps can access cellular data.
|
|
|
|
You can specify either a default setting for all apps or a per-app setting by specifying a Package Family Name. You can get the Package Family Name for an app by using the Get-AppPackage Windows PowerShell cmdlet. A per-app setting overrides the default setting.
|
|
|
|
If you choose the "User is in control" option, employees in your organization can decide whether Windows apps can access cellular data by using Settings > Network - Internet > Cellular on the device.
|
|
|
|
If you choose the "Force Allow" option, Windows apps are allowed to access cellular data and employees in your organization can't change it.
|
|
|
|
If you choose the "Force Deny" option, Windows apps aren't allowed to access cellular data and employees in your organization can't change it.
|
|
|
|
If you disable or don't configure this policy setting, employees in your organization can decide whether Windows apps can access cellular data by using Settings > Network - Internet > Cellular on the device.
|
|
|
|
If an app is open when this Group Policy object is applied on a device, employees must restart the app or device for the policy changes to be applied to the app.
|
|
<!-- LetAppsAccessCellularData-Description-End -->
|
|
|
|
<!-- LetAppsAccessCellularData-Editable-Begin -->
|
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
|
You can specify either a default setting for all apps or a per-app setting by specifying a Package Family Name. You can get the Package Family Name for an app by using the Get-AppPackage Windows PowerShell cmdlet. A per-app setting overrides the default setting.
|
|
|
|
If you choose the "User is in control" option, employees in your organization can decide whether Windows apps can access cellular data by using Settings > Network - Internet > Cellular on the device.
|
|
|
|
If you choose the "Force Allow" option, Windows apps are allowed to access cellular data and employees in your organization can't change it.
|
|
|
|
If you choose the "Force Deny" option, Windows apps aren't allowed to access cellular data and employees in your organization can't change it.
|
|
|
|
If you disable or don't configure this policy setting, employees in your organization can decide whether Windows apps can access cellular data by using Settings > Network - Internet > Cellular on the device.
|
|
|
|
If an app is open when this Group Policy object is applied on a device, employees must restart the app or device for the policy changes to be applied to the app.
|
|
<!-- LetAppsAccessCellularData-Editable-End -->
|
|
|
|
<!-- LetAppsAccessCellularData-DFProperties-Begin -->
|
|
**Description framework properties**:
|
|
|
|
| Property name | Property value |
|
|
|:--|:--|
|
|
| Format | `int` |
|
|
| Access Type | Add, Delete, Get, Replace |
|
|
| Default Value | 0 |
|
|
<!-- LetAppsAccessCellularData-DFProperties-End -->
|
|
|
|
<!-- LetAppsAccessCellularData-AllowedValues-Begin -->
|
|
**Allowed values**:
|
|
|
|
| Value | Description |
|
|
|:--|:--|
|
|
| 0 (Default) | User is in control. |
|
|
| 1 | Force Allow. |
|
|
| 2 | Force Deny. |
|
|
<!-- LetAppsAccessCellularData-AllowedValues-End -->
|
|
|
|
<!-- LetAppsAccessCellularData-GpMapping-Begin -->
|
|
**Group policy mapping**:
|
|
|
|
| Name | Value |
|
|
|:--|:--|
|
|
| Name | LetAppsAccessCellularData |
|
|
| Friendly Name | Let Windows apps access cellular data |
|
|
| Element Name | Default for all apps. |
|
|
| Location | Computer Configuration |
|
|
| Path | Network > WWAN Service > Cellular Data Access |
|
|
| Registry Key Name | Software\Policies\Microsoft\Windows\WwanSvc\CellularDataAccess |
|
|
| ADMX File Name | wwansvc.admx |
|
|
<!-- LetAppsAccessCellularData-GpMapping-End -->
|
|
|
|
<!-- LetAppsAccessCellularData-Examples-Begin -->
|
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
|
<!-- LetAppsAccessCellularData-Examples-End -->
|
|
|
|
<!-- LetAppsAccessCellularData-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_ForceAllowTheseApps-Begin -->
|
|
## LetAppsAccessCellularData_ForceAllowTheseApps
|
|
|
|
<!-- LetAppsAccessCellularData_ForceAllowTheseApps-Applicability-Begin -->
|
|
| Scope | Editions | Applicable OS |
|
|
|:--|:--|:--|
|
|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1709 [10.0.16299] and later |
|
|
<!-- LetAppsAccessCellularData_ForceAllowTheseApps-Applicability-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_ForceAllowTheseApps-OmaUri-Begin -->
|
|
```Device
|
|
./Device/Vendor/MSFT/Policy/Config/Cellular/LetAppsAccessCellularData_ForceAllowTheseApps
|
|
```
|
|
<!-- LetAppsAccessCellularData_ForceAllowTheseApps-OmaUri-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_ForceAllowTheseApps-Description-Begin -->
|
|
<!-- Description-Source-ADMX -->
|
|
This policy setting specifies whether Windows apps can access cellular data.
|
|
|
|
You can specify either a default setting for all apps or a per-app setting by specifying a Package Family Name. You can get the Package Family Name for an app by using the Get-AppPackage Windows PowerShell cmdlet. A per-app setting overrides the default setting.
|
|
|
|
If you choose the "User is in control" option, employees in your organization can decide whether Windows apps can access cellular data by using Settings > Network - Internet > Cellular on the device.
|
|
|
|
If you choose the "Force Allow" option, Windows apps are allowed to access cellular data and employees in your organization can't change it.
|
|
|
|
If you choose the "Force Deny" option, Windows apps aren't allowed to access cellular data and employees in your organization can't change it.
|
|
|
|
If you disable or don't configure this policy setting, employees in your organization can decide whether Windows apps can access cellular data by using Settings > Network - Internet > Cellular on the device.
|
|
|
|
If an app is open when this Group Policy object is applied on a device, employees must restart the app or device for the policy changes to be applied to the app.
|
|
<!-- LetAppsAccessCellularData_ForceAllowTheseApps-Description-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_ForceAllowTheseApps-Editable-Begin -->
|
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
|
<!-- LetAppsAccessCellularData_ForceAllowTheseApps-Editable-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_ForceAllowTheseApps-DFProperties-Begin -->
|
|
**Description framework properties**:
|
|
|
|
| Property name | Property value |
|
|
|:--|:--|
|
|
| Format | `chr` (string) |
|
|
| Access Type | Add, Delete, Get, Replace |
|
|
| Allowed Values | List (Delimiter: `;`) |
|
|
<!-- LetAppsAccessCellularData_ForceAllowTheseApps-DFProperties-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_ForceAllowTheseApps-GpMapping-Begin -->
|
|
**Group policy mapping**:
|
|
|
|
| Name | Value |
|
|
|:--|:--|
|
|
| Name | LetAppsAccessCellularData |
|
|
| Friendly Name | Let Windows apps access cellular data |
|
|
| Location | Computer Configuration |
|
|
| Path | Network > WWAN Service > Cellular Data Access |
|
|
| Registry Key Name | Software\Policies\Microsoft\Windows\WwanSvc\CellularDataAccess |
|
|
| ADMX File Name | wwansvc.admx |
|
|
<!-- LetAppsAccessCellularData_ForceAllowTheseApps-GpMapping-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_ForceAllowTheseApps-Examples-Begin -->
|
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
|
<!-- LetAppsAccessCellularData_ForceAllowTheseApps-Examples-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_ForceAllowTheseApps-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_ForceDenyTheseApps-Begin -->
|
|
## LetAppsAccessCellularData_ForceDenyTheseApps
|
|
|
|
<!-- LetAppsAccessCellularData_ForceDenyTheseApps-Applicability-Begin -->
|
|
| Scope | Editions | Applicable OS |
|
|
|:--|:--|:--|
|
|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1709 [10.0.16299] and later |
|
|
<!-- LetAppsAccessCellularData_ForceDenyTheseApps-Applicability-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_ForceDenyTheseApps-OmaUri-Begin -->
|
|
```Device
|
|
./Device/Vendor/MSFT/Policy/Config/Cellular/LetAppsAccessCellularData_ForceDenyTheseApps
|
|
```
|
|
<!-- LetAppsAccessCellularData_ForceDenyTheseApps-OmaUri-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_ForceDenyTheseApps-Description-Begin -->
|
|
<!-- Description-Source-ADMX -->
|
|
This policy setting specifies whether Windows apps can access cellular data.
|
|
|
|
You can specify either a default setting for all apps or a per-app setting by specifying a Package Family Name. You can get the Package Family Name for an app by using the Get-AppPackage Windows PowerShell cmdlet. A per-app setting overrides the default setting.
|
|
|
|
If you choose the "User is in control" option, employees in your organization can decide whether Windows apps can access cellular data by using Settings > Network - Internet > Cellular on the device.
|
|
|
|
If you choose the "Force Allow" option, Windows apps are allowed to access cellular data and employees in your organization can't change it.
|
|
|
|
If you choose the "Force Deny" option, Windows apps aren't allowed to access cellular data and employees in your organization can't change it.
|
|
|
|
If you disable or don't configure this policy setting, employees in your organization can decide whether Windows apps can access cellular data by using Settings > Network - Internet > Cellular on the device.
|
|
|
|
If an app is open when this Group Policy object is applied on a device, employees must restart the app or device for the policy changes to be applied to the app.
|
|
<!-- LetAppsAccessCellularData_ForceDenyTheseApps-Description-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_ForceDenyTheseApps-Editable-Begin -->
|
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
|
<!-- LetAppsAccessCellularData_ForceDenyTheseApps-Editable-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_ForceDenyTheseApps-DFProperties-Begin -->
|
|
**Description framework properties**:
|
|
|
|
| Property name | Property value |
|
|
|:--|:--|
|
|
| Format | `chr` (string) |
|
|
| Access Type | Add, Delete, Get, Replace |
|
|
| Allowed Values | List (Delimiter: `;`) |
|
|
<!-- LetAppsAccessCellularData_ForceDenyTheseApps-DFProperties-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_ForceDenyTheseApps-GpMapping-Begin -->
|
|
**Group policy mapping**:
|
|
|
|
| Name | Value |
|
|
|:--|:--|
|
|
| Name | LetAppsAccessCellularData |
|
|
| Friendly Name | Let Windows apps access cellular data |
|
|
| Location | Computer Configuration |
|
|
| Path | Network > WWAN Service > Cellular Data Access |
|
|
| Registry Key Name | Software\Policies\Microsoft\Windows\WwanSvc\CellularDataAccess |
|
|
| ADMX File Name | wwansvc.admx |
|
|
<!-- LetAppsAccessCellularData_ForceDenyTheseApps-GpMapping-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_ForceDenyTheseApps-Examples-Begin -->
|
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
|
<!-- LetAppsAccessCellularData_ForceDenyTheseApps-Examples-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_ForceDenyTheseApps-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_UserInControlOfTheseApps-Begin -->
|
|
## LetAppsAccessCellularData_UserInControlOfTheseApps
|
|
|
|
<!-- LetAppsAccessCellularData_UserInControlOfTheseApps-Applicability-Begin -->
|
|
| Scope | Editions | Applicable OS |
|
|
|:--|:--|:--|
|
|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1709 [10.0.16299] and later |
|
|
<!-- LetAppsAccessCellularData_UserInControlOfTheseApps-Applicability-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_UserInControlOfTheseApps-OmaUri-Begin -->
|
|
```Device
|
|
./Device/Vendor/MSFT/Policy/Config/Cellular/LetAppsAccessCellularData_UserInControlOfTheseApps
|
|
```
|
|
<!-- LetAppsAccessCellularData_UserInControlOfTheseApps-OmaUri-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_UserInControlOfTheseApps-Description-Begin -->
|
|
<!-- Description-Source-ADMX -->
|
|
This policy setting specifies whether Windows apps can access cellular data.
|
|
|
|
You can specify either a default setting for all apps or a per-app setting by specifying a Package Family Name. You can get the Package Family Name for an app by using the Get-AppPackage Windows PowerShell cmdlet. A per-app setting overrides the default setting.
|
|
|
|
If you choose the "User is in control" option, employees in your organization can decide whether Windows apps can access cellular data by using Settings > Network - Internet > Cellular on the device.
|
|
|
|
If you choose the "Force Allow" option, Windows apps are allowed to access cellular data and employees in your organization can't change it.
|
|
|
|
If you choose the "Force Deny" option, Windows apps aren't allowed to access cellular data and employees in your organization can't change it.
|
|
|
|
If you disable or don't configure this policy setting, employees in your organization can decide whether Windows apps can access cellular data by using Settings > Network - Internet > Cellular on the device.
|
|
|
|
If an app is open when this Group Policy object is applied on a device, employees must restart the app or device for the policy changes to be applied to the app.
|
|
<!-- LetAppsAccessCellularData_UserInControlOfTheseApps-Description-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_UserInControlOfTheseApps-Editable-Begin -->
|
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
|
<!-- LetAppsAccessCellularData_UserInControlOfTheseApps-Editable-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_UserInControlOfTheseApps-DFProperties-Begin -->
|
|
**Description framework properties**:
|
|
|
|
| Property name | Property value |
|
|
|:--|:--|
|
|
| Format | `chr` (string) |
|
|
| Access Type | Add, Delete, Get, Replace |
|
|
| Allowed Values | List (Delimiter: `;`) |
|
|
<!-- LetAppsAccessCellularData_UserInControlOfTheseApps-DFProperties-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_UserInControlOfTheseApps-GpMapping-Begin -->
|
|
**Group policy mapping**:
|
|
|
|
| Name | Value |
|
|
|:--|:--|
|
|
| Name | LetAppsAccessCellularData |
|
|
| Friendly Name | Let Windows apps access cellular data |
|
|
| Location | Computer Configuration |
|
|
| Path | Network > WWAN Service > Cellular Data Access |
|
|
| Registry Key Name | Software\Policies\Microsoft\Windows\WwanSvc\CellularDataAccess |
|
|
| ADMX File Name | wwansvc.admx |
|
|
<!-- LetAppsAccessCellularData_UserInControlOfTheseApps-GpMapping-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_UserInControlOfTheseApps-Examples-Begin -->
|
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
|
<!-- LetAppsAccessCellularData_UserInControlOfTheseApps-Examples-End -->
|
|
|
|
<!-- LetAppsAccessCellularData_UserInControlOfTheseApps-End -->
|
|
|
|
<!-- ShowAppCellularAccessUI-Begin -->
|
|
## ShowAppCellularAccessUI
|
|
|
|
<!-- ShowAppCellularAccessUI-Applicability-Begin -->
|
|
| Scope | Editions | Applicable OS |
|
|
|:--|:--|:--|
|
|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1709 [10.0.16299] and later |
|
|
<!-- ShowAppCellularAccessUI-Applicability-End -->
|
|
|
|
<!-- ShowAppCellularAccessUI-OmaUri-Begin -->
|
|
```Device
|
|
./Device/Vendor/MSFT/Policy/Config/Cellular/ShowAppCellularAccessUI
|
|
```
|
|
<!-- ShowAppCellularAccessUI-OmaUri-End -->
|
|
|
|
<!-- ShowAppCellularAccessUI-Description-Begin -->
|
|
<!-- Description-Source-ADMX -->
|
|
This policy setting configures the visibility of the link to the per-application cellular access control page in the cellular setting UX.
|
|
|
|
- If this policy setting is enabled, a drop-down list box presenting possible values will be active. Select "Hide" or "Show" to hide or show the link to the per-application cellular access control page.
|
|
|
|
- If this policy setting is disabled or isn't configured, the link to the per-application cellular access control page is showed by default.
|
|
<!-- ShowAppCellularAccessUI-Description-End -->
|
|
|
|
<!-- ShowAppCellularAccessUI-Editable-Begin -->
|
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
|
<!-- ShowAppCellularAccessUI-Editable-End -->
|
|
|
|
<!-- ShowAppCellularAccessUI-DFProperties-Begin -->
|
|
**Description framework properties**:
|
|
|
|
| Property name | Property value |
|
|
|:--|:--|
|
|
| Format | `chr` (string) |
|
|
| Access Type | Add, Delete, Get, Replace |
|
|
<!-- ShowAppCellularAccessUI-DFProperties-End -->
|
|
|
|
<!-- ShowAppCellularAccessUI-AdmxBacked-Begin -->
|
|
[!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]
|
|
|
|
**ADMX mapping**:
|
|
|
|
| Name | Value |
|
|
|:--|:--|
|
|
| Name | ShowAppCellularAccessUI |
|
|
| Friendly Name | Set Per-App Cellular Access UI Visibility |
|
|
| Location | Computer Configuration |
|
|
| Path | Network > WWAN Service > WWAN UI Settings |
|
|
| Registry Key Name | Software\Policies\Microsoft\Windows\WwanSvc\UISettings |
|
|
| ADMX File Name | wwansvc.admx |
|
|
<!-- ShowAppCellularAccessUI-AdmxBacked-End -->
|
|
|
|
<!-- ShowAppCellularAccessUI-Examples-Begin -->
|
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
|
<!-- ShowAppCellularAccessUI-Examples-End -->
|
|
|
|
<!-- ShowAppCellularAccessUI-End -->
|
|
|
|
<!-- Cellular-CspMoreInfo-Begin -->
|
|
<!-- Add any additional information about this CSP here. Anything outside this section will get overwritten. -->
|
|
<!-- Cellular-CspMoreInfo-End -->
|
|
|
|
<!-- Cellular-End -->
|
|
|
|
## Related articles
|
|
|
|
[Policy configuration service provider](policy-configuration-service-provider.md)
|