Windows 11 SE for Education settings list

• Applies to:

  ✅ Windows 11 SE

Windows 11 SE automatically configures certain settings and features in the operating system. You can use Microsoft Intune to customize these settings.

This article lists the settings automatically configured. For more information on Windows 11 SE, see Windows 11 SE for Education overview.

Settings that can be changed

The following table lists and describes the settings that can be changed by administrators.

Setting	Description	Default Value
Block manual unenrollment	When blocked, users can't unenroll their devices from device management services. Experience/AllowManualMDMUnenrollment CSP	Blocked
Allow option to Show Network	When allowed, it gives users the option to see the Show Network folder in File Explorer.	Allowed
Allow option to Show This PC	When allowed, it gives users the option to see the Show This PC folder in File Explorer.	Allowed
Set Allowed Folder location	Gives user access to these folders.	Default folders: Documents, Desktop, Pictures, and Downloads
Set Allowed Storage Locations	Blocks user access to these storage locations.	Blocks local drives and network drives
Allow News and Interests	Hides widgets.	Hide
Disable advertising ID	Blocks apps from using usage data to tailor advertisements. Privacy/DisableAdvertisingId CSP	Disabled
Visible settings pages	Default:
Enable App Install Control	When enabled, users can't download apps from the internet. SmartScreen/EnableAppInstallControl CSP	Enabled
Configure Storage Sense Cloud Content Dehydration Threshold	If a file hasn't been opened in 30 days, it becomes an online-only file. Online-only files can be opened when there's an internet connection. When an online-only file is opened on a device, it downloads and becomes locally available on that device. The file is available until it's unopened for the specified number of days, and becomes online-only again. Storage/ConfigStorageSenseCloudContentDehydrationThreshold CSP	30 days
Allow Telemetry	With Required Telemetry Only, it sends only basic device info, including quality-related data, app compatibility, and similar data to keep the device secure and up-to-date. System/AllowTelemetry CSP	Required Telemetry Only
Allow Experimentation	When disabled, Microsoft can't experiment with the product to study user preferences or device behavior. System/AllowExperimentation CSP	Disabled
Block external extensions	When blocked, in Microsoft Edge users can't install external extensions. BlockExternalExtensions	Blocked
Configure new tab page	Set the new tab page defaults to a specific url. Configure the new tab page URL	Office.com
Configure homepage	Set the Microsoft Edge's homepage default. HomepageIsNewTabPage	Office.com
Prevent SmartScreen prompt override	When enabled, in Microsoft Edge, users can't override Windows Defender SmartScreen warnings. PreventSmartScreenPromptOverride	Enabled
Wallpaper Image Customization	Specify a jpg, jpeg, or png image to be used as the desktop image. This setting can take an http or https URL to a remote image to be downloaded, a file URL to a local image. DesktopImageUrl	Not configured
Lock Screen Image Customization	Specify a jpg, jpeg, or png image to be used as lock screen image. This setting can take an http or https URL to a remote image to be downloaded, a file URL to a local image. LockScreenImageUrl	Not configured

Settings that can't be changed

The following settings can't be changed.

Category	Description
Visible Folders in File Explorer	By default, the Desktop, Downloads, Documents, and Pictures folders are visible to users in File Explorer. Users can make other folders, like This PC, visible in View > Options.
Launch Windows Maximized	All Windows are opened in the maximized view.
Windows Snapping	Windows snapping is limited to two Windows.
Allowed Account Types	Microsoft accounts and Microsoft Entra accounts are allowed.
Virtual Desktops	Virtual Desktops are blocked.
Microsoft Store	The Microsoft Store is blocked.
Administrative tools	Administrative tools, such as the command prompt and Windows PowerShell, can't be opened. Windows PowerShell scripts deployed using Microsoft Intune can run.
Apps	Only certain apps are allowed to run on Windows 11 SE. For more info on what apps can run on Windows 11 SE, see Windows 11 SE for Education overview.

Next steps

Windows 11 SE for Education overview