Upravit

Sdílet prostřednictvím


Policy CSP - FileExplorer

Tip

This CSP contains ADMX-backed policies which require a special SyncML format to enable or disable. You must specify the data type in the SyncML as <Format>chr</Format>. For details, see Understanding ADMX-backed policies.

The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see CDATA Sections.

AllowOptionToShowNetwork

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 11, version 21H2 [10.0.22000] and later
./User/Vendor/MSFT/Policy/Config/FileExplorer/AllowOptionToShowNetwork
./Device/Vendor/MSFT/Policy/Config/FileExplorer/AllowOptionToShowNetwork

When the Network folder is restricted, give the user the option to enumerate and navigate into it.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Not Allowed.
1 Allowed.

AllowOptionToShowThisPC

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 11, version 21H2 [10.0.22000] and later
./User/Vendor/MSFT/Policy/Config/FileExplorer/AllowOptionToShowThisPC
./Device/Vendor/MSFT/Policy/Config/FileExplorer/AllowOptionToShowThisPC

When This PC location is restricted, give the user the option to enumerate and navigate into it.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Not Allowed.
1 Allowed.

DisableGraphRecentItems

Scope Editions Applicable OS
✅ Device
❌ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 11, version 22H2 [10.0.22621] and later
./Device/Vendor/MSFT/Policy/Config/FileExplorer/DisableGraphRecentItems

Turning off this setting will prevent File Explorer from requesting cloud file metadata and displaying it in the homepage and other views in File Explorer. Any insights and files available based on account activity will be stopped in views such as Recent, Recommended, Favorites, Details pane, etc.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) File Explorer will request cloud file metadata and display it in the homepage and other views.
1 File Explorer won't request cloud file metadata or display it in the homepage or other views.

Group policy mapping:

Name Value
Name DisableGraphRecentItems
Friendly Name Turn off account-based insights, recent, favorite, and recommended files in File Explorer
Location Computer Configuration
Path WindowsComponents > File Explorer
Registry Key Name Software\Policies\Microsoft\Windows\Explorer
Registry Value Name DisableGraphRecentItems
ADMX File Name Explorer.admx

SetAllowedFolderLocations

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 11, version 21H2 [10.0.22000] and later
./User/Vendor/MSFT/Policy/Config/FileExplorer/SetAllowedFolderLocations
./Device/Vendor/MSFT/Policy/Config/FileExplorer/SetAllowedFolderLocations

A value that can represent one or more folder locations in File Explorer. If not specified, the default is access to all folder locations.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Access to all folder locations.
13 Documents, Pictures, Downloads.
15 Desktop, Documents, Pictures, Downloads.
31 Desktop, Documents, Pictures, Downloads, Network.
47 This PC, Desktop, Documents, Pictures, Downloads.
63 This PC, Desktop, Documents, Pictures, Downloads, Network.

SetAllowedStorageLocations

Scope Editions Applicable OS
✅ Device
✅ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 11, version 21H2 [10.0.22000] and later
./User/Vendor/MSFT/Policy/Config/FileExplorer/SetAllowedStorageLocations
./Device/Vendor/MSFT/Policy/Config/FileExplorer/SetAllowedStorageLocations

A value that can represent one or more storage locations in File Explorer. If not specified, the default is access to all storage locations.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Access to all storage locations.
1 Removable Drives.
2 Sync roots.
3 Removable Drives, Sync roots.
4 Local Drives.
5 Removable Drives, Local Drives.
6 Sync Roots, Local Drives.
7 Removable Drives, Sync Roots, Local Drives.

TurnOffDataExecutionPreventionForExplorer

Scope Editions Applicable OS
✅ Device
❌ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1803 [10.0.17134] and later
./Device/Vendor/MSFT/Policy/Config/FileExplorer/TurnOffDataExecutionPreventionForExplorer

Disabling data execution prevention can allow certain legacy plug-in applications to function without terminating Explorer.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get, Replace

Tip

This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to Enabling a policy.

ADMX mapping:

Name Value
Name NoDataExecutionPrevention
Friendly Name Turn off Data Execution Prevention for Explorer
Location Computer Configuration
Path WindowsComponents > File Explorer
Registry Key Name Software\Policies\Microsoft\Windows\Explorer
Registry Value Name NoDataExecutionPrevention
ADMX File Name Explorer.admx

TurnOffHeapTerminationOnCorruption

Scope Editions Applicable OS
✅ Device
❌ User
✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1803 [10.0.17134] and later
./Device/Vendor/MSFT/Policy/Config/FileExplorer/TurnOffHeapTerminationOnCorruption

Disabling heap termination on corruption can allow certain legacy plug-in applications to function without terminating Explorer immediately, although Explorer may still terminate unexpectedly later.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get, Replace

Tip

This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to Enabling a policy.

ADMX mapping:

Name Value
Name NoHeapTerminationOnCorruption
Friendly Name Turn off heap termination on corruption
Location Computer Configuration
Path WindowsComponents > File Explorer
Registry Key Name Software\Policies\Microsoft\Windows\Explorer
Registry Value Name NoHeapTerminationOnCorruption
ADMX File Name Explorer.admx

Policy configuration service provider