mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-12 05:17:22 +00:00
ef1c69b439
* smb adds * smb adds * formatting * private preview and support content * edit removed and dep * Fix blocking issues * Acro-fix * 24H2 CSP Updates * Fix link * fix link in dep page * edit * edit index file * syntax-fix-24h2 * ltsc-edits * ltsc-edits * lichris-docs-1 * Acrolinx improvements * refresh for maxado-8631996 * update link for maxado-8631993 * additional edits, acrolinx * ltsc-tw * contentsource-8914508 * contentsource-8914508 * Updates for 1 October release * Set stale debug to false * update gp link for 24h2 * additional changes * Changes to updates, acrolinx changes * fixes broken links * Fixed alignment issues * updates from Rafal * fixed acrolinx * so many link fixes * added release notes and troubleshoot content * updates * Update security-compliance-toolkit-10.md Added Windows 11 24H2 * Update get-support-for-security-baselines.md Updated for Windows 11 24H2 * bump date * bump date * fix pde comment * fixing broken link * Fix broken redirections * fix to rel link * reset head, fix link * add cli to deploy, add script to cli * removing "mcce" * edits to create page * Update default and global release policies OS version and dates to latest release values * emoved e from mcce and other changes * updated example script * added important notice to update page * more update page changes * clarified how proxy configuration is used * anonymizing variables in example script * revise example script * acrolinx fixes to update page * changes to other pages and content in overview page * Update broken link Update broken link * Update windows-sandbox-configure-using-wsb-file.md Update `HostFolder` value description in `MappedFolder`, specifying that the path could be absolute or relative, not only absolute as, instead, is for the `SandboxFolder` value. * Remove bad link Removed bad link. There is already a second link referring to content so no need to replace the link. * docfx update for security book * Correct TOC entry changing Windows 10 to Windows * Update whats-new-do.md - Vpn to VPN - Minor improvements * Updated date for freshness reporting * Add EOS callout Fix some obvious Acrolinx issues * Fixed typo added clarity * Update mcc-ent-deploy-to-windows.md * Update .openpublishing.redirection.windows-deployment.json * Update .openpublishing.redirection.windows-deployment.json * Update policy-csp-localpoliciessecurityoptions.md * Correct indentation and spacing * Acrolinx: "Enteprise" * Update mcc-ent-edu-overview.md * refresh * Remove redirection and final bits of store-for-business store-for-business, AKA /microsoft-store/, is retired, and the content is archived in officearchive-pr. This archival was for ADO task 9268422. * added support content and other changes * fixed tabs * fixed tabs * Updated device reg policy and group information * Update delivery-optimization-endpoints.md Added a line item in MCC table for Outlook *res.cdn.office.net requirement * freshness review * Fix broken links * Minor change * content for faq * changes to landing page * more content to faqs * pencil edit * add copilot exps link * edits and ren cli file temporarily * ren file back and edit toc to lowercase * edit * edit * edit * Update windows-autopatch-configure-network.md Adding a new network endpoint required for the service 'device.autopatch.microsoft.com' @tiaraquan * Clarify some points and remove data that is confusing to customers. * fix syntax * Sentence correction * Update windows/deployment/do/waas-delivery-optimization-faq.yml Co-authored-by: Meghan Stewart <33289333+mestew@users.noreply.github.com> * Update windows/deployment/do/waas-delivery-optimization-faq.yml Co-authored-by: Meghan Stewart <33289333+mestew@users.noreply.github.com> * moved shortcuts under policy settings article --------- Co-authored-by: Alma Jenks <v-alje@microsoft.com> Co-authored-by: Meghan Stewart <33289333+mestew@users.noreply.github.com> Co-authored-by: Stacyrch140 <102548089+Stacyrch140@users.noreply.github.com> Co-authored-by: Nidhi Doshi <77081571+doshnid@users.noreply.github.com> Co-authored-by: Gary Moore <5432776+garycentric@users.noreply.github.com> Co-authored-by: Vinay Pamnani (from Dev Box) <vinpa@microsoft.com> Co-authored-by: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com> Co-authored-by: Aaron Czechowski <aczechowski@users.noreply.github.com> Co-authored-by: Aditi Srivastava <133841950+aditisrivastava07@users.noreply.github.com> Co-authored-by: Daniel H. Brown <32883970+DHB-MSFT@users.noreply.github.com> Co-authored-by: David Strome <21028455+dstrome@users.noreply.github.com> Co-authored-by: Padma Jayaraman <v-padmaj@microsoft.com> Co-authored-by: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Co-authored-by: Rebecca Agiewich <16087112+rjagiewich@users.noreply.github.com> Co-authored-by: Rick Munck <33725928+jmunck@users.noreply.github.com> Co-authored-by: Tanaka <Huios@users.noreply.github.com> Co-authored-by: Tiara Quan <95256667+tiaraquan@users.noreply.github.com> Co-authored-by: Frank Rojas <45807133+frankroj@users.noreply.github.com> Co-authored-by: Davide Piccinini <davide.piccinini.95@gmail.com> Co-authored-by: Phil Garcia <phil@thinkedge.com> Co-authored-by: Learn Build Service GitHub App <Learn Build Service LearnBuild@microsoft.com> Co-authored-by: tiaraquan <tiaraquan@microsoft.com> Co-authored-by: Caitlin Hart <caithart@microsoft.com> Co-authored-by: Harman Thind <63820404+hathin@users.noreply.github.com> Co-authored-by: [cmknox] <[cmknox@gmail.com]> Co-authored-by: Carmen Forsmann <cmforsmann@live.com>
343 lines
12 KiB
Markdown
343 lines
12 KiB
Markdown
---
|
|
title: WindowsAI Policy CSP
|
|
description: Learn more about the WindowsAI Area in Policy CSP.
|
|
ms.date: 09/27/2024
|
|
---
|
|
|
|
<!-- Auto-Generated CSP Document -->
|
|
|
|
<!-- WindowsAI-Begin -->
|
|
# Policy CSP - WindowsAI
|
|
|
|
[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]
|
|
|
|
<!-- WindowsAI-Editable-Begin -->
|
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
|
<!-- WindowsAI-Editable-End -->
|
|
|
|
<!-- DisableAIDataAnalysis-Begin -->
|
|
## DisableAIDataAnalysis
|
|
|
|
<!-- DisableAIDataAnalysis-Applicability-Begin -->
|
|
| Scope | Editions | Applicable OS |
|
|
|:--|:--|:--|
|
|
| ❌ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 24H2 [10.0.26100] and later |
|
|
<!-- DisableAIDataAnalysis-Applicability-End -->
|
|
|
|
<!-- DisableAIDataAnalysis-OmaUri-Begin -->
|
|
```User
|
|
./User/Vendor/MSFT/Policy/Config/WindowsAI/DisableAIDataAnalysis
|
|
```
|
|
<!-- DisableAIDataAnalysis-OmaUri-End -->
|
|
|
|
<!-- DisableAIDataAnalysis-Description-Begin -->
|
|
<!-- Description-Source-ADMX -->
|
|
This policy setting allows you to control whether Windows saves snapshots of the screen and analyzes the user's activity on their device.
|
|
|
|
- If you enable this policy setting, Windows won't be able to save snapshots and users won't be able to search for or browse through their historical device activity using Recall.
|
|
|
|
- If you disable or don't configure this policy setting, Windows will save snapshots of the screen and users will be able to search for or browse through a timeline of their past activities using Recall.
|
|
<!-- DisableAIDataAnalysis-Description-End -->
|
|
|
|
<!-- DisableAIDataAnalysis-Editable-Begin -->
|
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
|
<!-- DisableAIDataAnalysis-Editable-End -->
|
|
|
|
<!-- DisableAIDataAnalysis-DFProperties-Begin -->
|
|
**Description framework properties**:
|
|
|
|
| Property name | Property value |
|
|
|:--|:--|
|
|
| Format | `int` |
|
|
| Access Type | Add, Delete, Get, Replace |
|
|
| Default Value | 0 |
|
|
<!-- DisableAIDataAnalysis-DFProperties-End -->
|
|
|
|
<!-- DisableAIDataAnalysis-AllowedValues-Begin -->
|
|
**Allowed values**:
|
|
|
|
| Value | Description |
|
|
|:--|:--|
|
|
| 0 (Default) | Enable Saving Snapshots for Windows. |
|
|
| 1 | Disable Saving Snapshots for Windows. |
|
|
<!-- DisableAIDataAnalysis-AllowedValues-End -->
|
|
|
|
<!-- DisableAIDataAnalysis-GpMapping-Begin -->
|
|
**Group policy mapping**:
|
|
|
|
| Name | Value |
|
|
|:--|:--|
|
|
| Name | DisableAIDataAnalysis |
|
|
| Friendly Name | Turn off Saving Snapshots for Windows |
|
|
| Location | User Configuration |
|
|
| Path | Windows Components > Windows AI |
|
|
| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\WindowsAI |
|
|
| Registry Value Name | DisableAIDataAnalysis |
|
|
| ADMX File Name | WindowsCopilot.admx |
|
|
<!-- DisableAIDataAnalysis-GpMapping-End -->
|
|
|
|
<!-- DisableAIDataAnalysis-Examples-Begin -->
|
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
|
<!-- DisableAIDataAnalysis-Examples-End -->
|
|
|
|
<!-- DisableAIDataAnalysis-End -->
|
|
|
|
<!-- DisableCocreator-Begin -->
|
|
## DisableCocreator
|
|
|
|
<!-- DisableCocreator-Applicability-Begin -->
|
|
| Scope | Editions | Applicable OS |
|
|
|:--|:--|:--|
|
|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
|
|
<!-- DisableCocreator-Applicability-End -->
|
|
|
|
<!-- DisableCocreator-OmaUri-Begin -->
|
|
```Device
|
|
./Device/Vendor/MSFT/Policy/Config/WindowsAI/DisableCocreator
|
|
```
|
|
<!-- DisableCocreator-OmaUri-End -->
|
|
|
|
<!-- DisableCocreator-Description-Begin -->
|
|
<!-- Description-Source-DDF -->
|
|
This policy setting allows you to control whether Cocreator functionality is disabled in the Windows Paint app.
|
|
|
|
- If this policy is enabled, Cocreator functionality won't be accessible in the Paint app.
|
|
|
|
- If this policy is disabled or not configured, users will be able to access Cocreator functionality.
|
|
<!-- DisableCocreator-Description-End -->
|
|
|
|
<!-- DisableCocreator-Editable-Begin -->
|
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
|
<!-- DisableCocreator-Editable-End -->
|
|
|
|
<!-- DisableCocreator-DFProperties-Begin -->
|
|
**Description framework properties**:
|
|
|
|
| Property name | Property value |
|
|
|:--|:--|
|
|
| Format | `int` |
|
|
| Access Type | Add, Delete, Get, Replace |
|
|
| Default Value | 0 |
|
|
<!-- DisableCocreator-DFProperties-End -->
|
|
|
|
<!-- DisableCocreator-AllowedValues-Begin -->
|
|
**Allowed values**:
|
|
|
|
| Value | Description |
|
|
|:--|:--|
|
|
| 0 (Default) | Cocreator is enabled. |
|
|
| 1 | Cocreator is disabled. |
|
|
<!-- DisableCocreator-AllowedValues-End -->
|
|
|
|
<!-- DisableCocreator-GpMapping-Begin -->
|
|
**Group policy mapping**:
|
|
|
|
| Name | Value |
|
|
|:--|:--|
|
|
| Name | DisableCocreator |
|
|
| Path | WindowsAI > AT > WindowsComponents > Paint |
|
|
<!-- DisableCocreator-GpMapping-End -->
|
|
|
|
<!-- DisableCocreator-Examples-Begin -->
|
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
|
<!-- DisableCocreator-Examples-End -->
|
|
|
|
<!-- DisableCocreator-End -->
|
|
|
|
<!-- DisableImageCreator-Begin -->
|
|
## DisableImageCreator
|
|
|
|
<!-- DisableImageCreator-Applicability-Begin -->
|
|
| Scope | Editions | Applicable OS |
|
|
|:--|:--|:--|
|
|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
|
|
<!-- DisableImageCreator-Applicability-End -->
|
|
|
|
<!-- DisableImageCreator-OmaUri-Begin -->
|
|
```Device
|
|
./Device/Vendor/MSFT/Policy/Config/WindowsAI/DisableImageCreator
|
|
```
|
|
<!-- DisableImageCreator-OmaUri-End -->
|
|
|
|
<!-- DisableImageCreator-Description-Begin -->
|
|
<!-- Description-Source-DDF -->
|
|
This policy setting allows you to control whether Image Creator functionality is disabled in the Windows Paint app.
|
|
|
|
- If this policy is enabled, Image Creator functionality won't be accessible in the Paint app.
|
|
|
|
- If this policy is disabled or not configured, users will be able to access Image Creator functionality.
|
|
<!-- DisableImageCreator-Description-End -->
|
|
|
|
<!-- DisableImageCreator-Editable-Begin -->
|
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
|
<!-- DisableImageCreator-Editable-End -->
|
|
|
|
<!-- DisableImageCreator-DFProperties-Begin -->
|
|
**Description framework properties**:
|
|
|
|
| Property name | Property value |
|
|
|:--|:--|
|
|
| Format | `int` |
|
|
| Access Type | Add, Delete, Get, Replace |
|
|
| Default Value | 0 |
|
|
<!-- DisableImageCreator-DFProperties-End -->
|
|
|
|
<!-- DisableImageCreator-AllowedValues-Begin -->
|
|
**Allowed values**:
|
|
|
|
| Value | Description |
|
|
|:--|:--|
|
|
| 0 (Default) | Image Creator is enabled. |
|
|
| 1 | Image Creator is disabled. |
|
|
<!-- DisableImageCreator-AllowedValues-End -->
|
|
|
|
<!-- DisableImageCreator-GpMapping-Begin -->
|
|
**Group policy mapping**:
|
|
|
|
| Name | Value |
|
|
|:--|:--|
|
|
| Name | DisableImageCreator |
|
|
| Path | WindowsAI > AT > WindowsComponents > Paint |
|
|
<!-- DisableImageCreator-GpMapping-End -->
|
|
|
|
<!-- DisableImageCreator-Examples-Begin -->
|
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
|
<!-- DisableImageCreator-Examples-End -->
|
|
|
|
<!-- DisableImageCreator-End -->
|
|
|
|
<!-- SetCopilotHardwareKey-Begin -->
|
|
## SetCopilotHardwareKey
|
|
|
|
<!-- SetCopilotHardwareKey-Applicability-Begin -->
|
|
| Scope | Editions | Applicable OS |
|
|
|:--|:--|:--|
|
|
| ❌ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
|
|
<!-- SetCopilotHardwareKey-Applicability-End -->
|
|
|
|
<!-- SetCopilotHardwareKey-OmaUri-Begin -->
|
|
```User
|
|
./User/Vendor/MSFT/Policy/Config/WindowsAI/SetCopilotHardwareKey
|
|
```
|
|
<!-- SetCopilotHardwareKey-OmaUri-End -->
|
|
|
|
<!-- SetCopilotHardwareKey-Description-Begin -->
|
|
<!-- Description-Source-DDF -->
|
|
This policy setting determines which app opens when the user presses the Copilot key on their keyboard.
|
|
|
|
- If the policy is enabled, the specified app will open when the user presses the Copilot key. Users can change the key assignment in Settings.
|
|
|
|
- If the policy isn't configured, Copilot will open if it's available in that country or region.
|
|
<!-- SetCopilotHardwareKey-Description-End -->
|
|
|
|
<!-- SetCopilotHardwareKey-Editable-Begin -->
|
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
|
<!-- SetCopilotHardwareKey-Editable-End -->
|
|
|
|
<!-- SetCopilotHardwareKey-DFProperties-Begin -->
|
|
**Description framework properties**:
|
|
|
|
| Property name | Property value |
|
|
|:--|:--|
|
|
| Format | `chr` (string) |
|
|
| Access Type | Add, Delete, Get, Replace |
|
|
<!-- SetCopilotHardwareKey-DFProperties-End -->
|
|
|
|
<!-- SetCopilotHardwareKey-GpMapping-Begin -->
|
|
**Group policy mapping**:
|
|
|
|
| Name | Value |
|
|
|:--|:--|
|
|
| Name | SetCopilotHardwareKey |
|
|
| Path | WindowsCopilot > AT > WindowsComponents > WindowsCopilot |
|
|
<!-- SetCopilotHardwareKey-GpMapping-End -->
|
|
|
|
<!-- SetCopilotHardwareKey-Examples-Begin -->
|
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
|
<!-- SetCopilotHardwareKey-Examples-End -->
|
|
|
|
<!-- SetCopilotHardwareKey-End -->
|
|
|
|
<!-- TurnOffWindowsCopilot-Begin -->
|
|
## TurnOffWindowsCopilot
|
|
|
|
> [!NOTE]
|
|
> This policy is deprecated and may be removed in a future release.
|
|
|
|
<!-- TurnOffWindowsCopilot-Applicability-Begin -->
|
|
| Scope | Editions | Applicable OS |
|
|
|:--|:--|:--|
|
|
| ❌ Device <br> ✅ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 21H2 [10.0.19044.3758] and later <br> ✅ Windows 10, version 22H2 with [KB5032278](https://support.microsoft.com/help/5032278) [10.0.19045.3758] and later <br> ✅ Windows 11, version 22H2 with [KB5030310](https://support.microsoft.com/help/5030310) [10.0.22621.2361] and later <br> ✅ Windows 11, version 23H2 [10.0.22631] and later |
|
|
<!-- TurnOffWindowsCopilot-Applicability-End -->
|
|
|
|
<!-- TurnOffWindowsCopilot-OmaUri-Begin -->
|
|
```User
|
|
./User/Vendor/MSFT/Policy/Config/WindowsAI/TurnOffWindowsCopilot
|
|
```
|
|
<!-- TurnOffWindowsCopilot-OmaUri-End -->
|
|
|
|
<!-- TurnOffWindowsCopilot-Description-Begin -->
|
|
<!-- Description-Source-ADMX -->
|
|
This policy setting allows you to turn off Windows Copilot.
|
|
|
|
- If you enable this policy setting, users won't be able to use Copilot. The Copilot icon won't appear on the taskbar either.
|
|
|
|
- If you disable or don't configure this policy setting, users will be able to use Copilot when it's available to them.
|
|
<!-- TurnOffWindowsCopilot-Description-End -->
|
|
|
|
<!-- TurnOffWindowsCopilot-Editable-Begin -->
|
|
|
|
> [!Note]
|
|
> - The TurnOffWindowsCopilot policy isn't for the [new Copilot experience](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/evolving-copilot-in-windows-for-your-workforce/ba-p/4141999) that's in some [Windows Insider builds](https://blogs.windows.com/windows-insider/2024/05/22/releasing-windows-11-version-24h2-to-the-release-preview-channel/) and that will be gradually rolling out to Windows 11 and Windows 10 devices. <!--9048085-->
|
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
|
<!-- TurnOffWindowsCopilot-Editable-End -->
|
|
|
|
<!-- TurnOffWindowsCopilot-DFProperties-Begin -->
|
|
**Description framework properties**:
|
|
|
|
| Property name | Property value |
|
|
|:--|:--|
|
|
| Format | `int` |
|
|
| Access Type | Add, Delete, Get, Replace |
|
|
| Default Value | 0 |
|
|
<!-- TurnOffWindowsCopilot-DFProperties-End -->
|
|
|
|
<!-- TurnOffWindowsCopilot-AllowedValues-Begin -->
|
|
**Allowed values**:
|
|
|
|
| Value | Description |
|
|
|:--|:--|
|
|
| 0 (Default) | Enable Copilot. |
|
|
| 1 | Disable Copilot. |
|
|
<!-- TurnOffWindowsCopilot-AllowedValues-End -->
|
|
|
|
<!-- TurnOffWindowsCopilot-GpMapping-Begin -->
|
|
**Group policy mapping**:
|
|
|
|
| Name | Value |
|
|
|:--|:--|
|
|
| Name | TurnOffWindowsCopilot |
|
|
| Friendly Name | Turn off Windows Copilot |
|
|
| Location | User Configuration |
|
|
| Path | Windows Components > Windows Copilot |
|
|
| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows\WindowsCopilot |
|
|
| Registry Value Name | TurnOffWindowsCopilot |
|
|
| ADMX File Name | WindowsCopilot.admx |
|
|
<!-- TurnOffWindowsCopilot-GpMapping-End -->
|
|
|
|
<!-- TurnOffWindowsCopilot-Examples-Begin -->
|
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
|
<!-- TurnOffWindowsCopilot-Examples-End -->
|
|
|
|
<!-- TurnOffWindowsCopilot-End -->
|
|
|
|
<!-- WindowsAI-CspMoreInfo-Begin -->
|
|
<!-- Add any additional information about this CSP here. Anything outside this section will get overwritten. -->
|
|
<!-- WindowsAI-CspMoreInfo-End -->
|
|
|
|
<!-- WindowsAI-End -->
|
|
|
|
## Related articles
|
|
|
|
[Policy configuration service provider](policy-configuration-service-provider.md)
|