Rediger

Del via

Default Windows configurations in Express Configuration

  • Artikel

Applies to:

  • Windows 10
  • Windows 11
  • Windows 11 SE

Express Configuration shows the most common Windows settings to help you quickly set up your Windows devices. This article lists each of those settings and describes what they do.

Make changes to fit your school's rules and policies, or click straight through the settings page to apply the preset recommendations.

For the complete list of settings and descriptions, see All Windows 10 settings in Intune for Education.

Accounts and sign-in

Setting What it does
Block adding and signing in with personal Microsoft accounts Block students and teachers from adding and signing in to personal Microsoft accounts on the device. Personal Microsoft accounts refer to accounts that use a Microsoft domain name, but aren't in your school's Microsoft Entra tenant.
Block adding and signing in with non-Microsoft accounts Block students and teachers from adding and signing in to non-Microsoft accounts, such as Google, Yahoo, and iCloud. Use this setting to force users to only use their Microsoft accounts for email.
Configure preferred Microsoft Entra tenant domain Configure your school's domain name so that users can sign in to Windows without it. For example, instead of signing in with the username alain@contoso.com, a student would only need to sign in with alain. When configured, this setting prepopulates your tenant domain name, but you can still edit it.

Apps

Setting What it does
Block installing apps from the Microsoft Store for Education Block users from installing apps from unauthorized locations.
Require Microsoft Store for Education apps to be installed from the private store Require users to only install apps from the Microsoft Store for Education that your organization has set up.

Enrollment controls

Setting What it does
Block manual unenrollment Block users from manually unenrolling devices from management.
Block adding provisioning packages Block users from adding new provisioning packages that contain device settings.
Block removing provisioning packages Block users from removing provisioning packages that contain device settings.

Microsoft Edge settings

Setting What it does
Configure homepages Configure how the Microsoft Edge home page appears to students and teachers. Open custom pages opens the URL of your choice. The browser will open a new tab for each URL that you add. Open last session's pages opens the pages that were active the last time the browser was closed. If you don't configure this setting, users can configure the home page on their own.
Block InPrivate browsing Block users from using InPrivate browsing, which stops Microsoft Edge from saving data like browsing history and cookies.
Block browser extensions Block users from installing browser extensions.
Block pop-ups Block websites from opening new windows.
Block password manager Block users from using the password manager to save passwords.
Block automatically filling form entries Block saving data entered in a form field online.
Block Developer Tools Block users from opening Microsoft Edge Developer Tools. These tools enable users to build and debug webpages.

User experience

Setting What it does
Block camera Block use of the device camera.
Block OneDrive file sync Block the device from syncing files to OneDrive.
Block removable storage Block the use of removable storage, such as USB drives, SD cards, and external hard drives.
Block Cortana Block Cortana, the digital assistant built into Windows that can answer questions and perform tasks.
Block location services Block apps from using location services to access the device’s location.
Block ending tasks in Task Manager Block users from using Task Manager to force a program, process, or task to close.
Block changing date and time settings Block users from changing the device date and time settings.
Block changing language settings Block users from changing the device language.
Block changing device region settings Block users from changing region settings, such as country/region and language.
Set custom lock screen image Add a custom background image to the device sign-in screen. Type in the web link for a .jpg or .png image that's less than 20 MB in size.
Set custom desktop image Add a custom background image to the device desktop. Type in the web link for a .jpg or .png image that's less than 20 MB in size.
Block access to the Settings app Block user access to the entire Settings app.

Reset default settings

To restore all settings to their default values, click Reset to suggested defaults.