Policies in Policy CSP supported by group policy
This article lists the policies in Policy CSP that have a group policy mapping.
AboveLock
Accounts
ApplicationDefaults
ApplicationManagement
- RequirePrivateStoreOnly
- MSIAlwaysInstallWithElevatedPrivileges
- AllowAllTrustedApps
- AllowAppStoreAutoUpdate
- AllowAutomaticAppArchiving
- AllowDeveloperUnlock
- AllowGameDVR
- AllowSharedUserAppData
- MSIAllowUserControlOverInstall
- RestrictAppDataToSystemVolume
- RestrictAppToSystemVolume
- DisableStoreOriginatedApps
- BlockNonAdminUserInstall
Audit
- AccountLogon_AuditCredentialValidation
- AccountLogon_AuditKerberosAuthenticationService
- AccountLogon_AuditKerberosServiceTicketOperations
- AccountLogon_AuditOtherAccountLogonEvents
- AccountManagement_AuditApplicationGroupManagement
- AccountManagement_AuditComputerAccountManagement
- AccountManagement_AuditDistributionGroupManagement
- AccountManagement_AuditOtherAccountManagementEvents
- AccountManagement_AuditSecurityGroupManagement
- AccountManagement_AuditUserAccountManagement
- DetailedTracking_AuditDPAPIActivity
- DetailedTracking_AuditPNPActivity
- DetailedTracking_AuditProcessCreation
- DetailedTracking_AuditProcessTermination
- DetailedTracking_AuditRPCEvents
- DetailedTracking_AuditTokenRightAdjusted
- DSAccess_AuditDetailedDirectoryServiceReplication
- DSAccess_AuditDirectoryServiceAccess
- DSAccess_AuditDirectoryServiceChanges
- DSAccess_AuditDirectoryServiceReplication
- AccountLogonLogoff_AuditAccountLockout
- AccountLogonLogoff_AuditUserDeviceClaims
- AccountLogonLogoff_AuditGroupMembership
- AccountLogonLogoff_AuditIPsecExtendedMode
- AccountLogonLogoff_AuditIPsecMainMode
- AccountLogonLogoff_AuditIPsecQuickMode
- AccountLogonLogoff_AuditLogoff
- AccountLogonLogoff_AuditLogon
- AccountLogonLogoff_AuditNetworkPolicyServer
- AccountLogonLogoff_AuditOtherLogonLogoffEvents
- AccountLogonLogoff_AuditSpecialLogon
- ObjectAccess_AuditApplicationGenerated
- ObjectAccess_AuditCertificationServices
- ObjectAccess_AuditDetailedFileShare
- ObjectAccess_AuditFileShare
- ObjectAccess_AuditFileSystem
- ObjectAccess_AuditFilteringPlatformConnection
- ObjectAccess_AuditFilteringPlatformPacketDrop
- ObjectAccess_AuditHandleManipulation
- ObjectAccess_AuditKernelObject
- ObjectAccess_AuditOtherObjectAccessEvents
- ObjectAccess_AuditRegistry
- ObjectAccess_AuditRemovableStorage
- ObjectAccess_AuditSAM
- ObjectAccess_AuditCentralAccessPolicyStaging
- PolicyChange_AuditPolicyChange
- PolicyChange_AuditAuthenticationPolicyChange
- PolicyChange_AuditAuthorizationPolicyChange
- PolicyChange_AuditFilteringPlatformPolicyChange
- PolicyChange_AuditMPSSVCRuleLevelPolicyChange
- PolicyChange_AuditOtherPolicyChangeEvents
- PrivilegeUse_AuditNonSensitivePrivilegeUse
- PrivilegeUse_AuditOtherPrivilegeUseEvents
- PrivilegeUse_AuditSensitivePrivilegeUse
- System_AuditIPsecDriver
- System_AuditOtherSystemEvents
- System_AuditSecurityStateChange
- System_AuditSecuritySystemExtension
- System_AuditSystemIntegrity
Authentication
BITS
- JobInactivityTimeout
- BandwidthThrottlingStartTime
- BandwidthThrottlingEndTime
- BandwidthThrottlingTransferRate
- CostedNetworkBehaviorForegroundPriority
- CostedNetworkBehaviorBackgroundPriority
Browser
- AllowAddressBarDropdown
- AllowAutofill
- AllowCookies
- AllowDeveloperTools
- AllowDoNotTrack
- AllowExtensions
- AllowFlash
- AllowFlashClickToRun
- AllowFullScreenMode
- AllowInPrivate
- AllowMicrosoftCompatibilityList
- ConfigureTelemetryForMicrosoft365Analytics
- AllowPasswordManager
- AllowPopups
- AllowPrinting
- AllowSavingHistory
- AllowSearchEngineCustomization
- AllowSearchSuggestionsinAddressBar
- AllowSideloadingOfExtensions
- AllowSmartScreen
- AllowWebContentOnNewTabPage
- AlwaysEnableBooksLibrary
- ClearBrowsingDataOnExit
- ConfigureAdditionalSearchEngines
- ConfigureFavoritesBar
- ConfigureHomeButton
- ConfigureOpenMicrosoftEdgeWith
- DisableLockdownOfStartPages
- EnableExtendedBooksTelemetry
- AllowTabPreloading
- AllowPrelaunch
- EnterpriseModeSiteList
- PreventTurningOffRequiredExtensions
- HomePages
- LockdownFavorites
- ConfigureKioskMode
- ConfigureKioskResetAfterIdleTimeout
- PreventAccessToAboutFlagsInMicrosoftEdge
- PreventFirstRunPage
- PreventCertErrorOverrides
- PreventSmartScreenPromptOverride
- PreventSmartScreenPromptOverrideForFiles
- PreventLiveTileDataCollection
- PreventUsingLocalHostIPAddressForWebRTC
- ProvisionFavorites
- SendIntranetTraffictoInternetExplorer
- SetDefaultSearchEngine
- SetHomeButtonURL
- SetNewTabPageURL
- ShowMessageWhenOpeningSitesInInternetExplorer
- SyncFavoritesBetweenIEAndMicrosoftEdge
- UnlockHomeButton
- UseSharedFolderForBooks
Camera
Cellular
- LetAppsAccessCellularData
- LetAppsAccessCellularData_ForceAllowTheseApps
- LetAppsAccessCellularData_ForceDenyTheseApps
- LetAppsAccessCellularData_UserInControlOfTheseApps
Connectivity
Cryptography
Defender
- AllowArchiveScanning
- AllowBehaviorMonitoring
- AllowCloudProtection
- AllowEmailScanning
- AllowFullScanOnMappedNetworkDrives
- AllowFullScanRemovableDriveScanning
- AllowIOAVProtection
- AllowOnAccessProtection
- AllowRealtimeMonitoring
- AllowScanningNetworkFiles
- AllowUserUIAccess
- AttackSurfaceReductionOnlyExclusions
- AttackSurfaceReductionRules
- AvgCPULoadFactor
- CloudBlockLevel
- CloudExtendedTimeout
- ControlledFolderAccessAllowedApplications
- CheckForSignaturesBeforeRunningScan
- SecurityIntelligenceLocation
- ControlledFolderAccessProtectedFolders
- DaysToRetainCleanedMalware
- DisableCatchupFullScan
- DisableCatchupQuickScan
- EnableControlledFolderAccess
- EnableLowCPUPriority
- EnableNetworkProtection
- ExcludedPaths
- ExcludedExtensions
- ExcludedProcesses
- PUAProtection
- RealTimeScanDirection
- ScanParameter
- ScheduleQuickScanTime
- ScheduleScanDay
- ScheduleScanTime
- SignatureUpdateFallbackOrder
- SignatureUpdateFileSharesSources
- SignatureUpdateInterval
- SubmitSamplesConsent
- ThreatSeverityDefaultAction
DeliveryOptimization
- DODownloadMode
- DOGroupId
- DOMaxCacheSize
- DOAbsoluteMaxCacheSize
- DOMaxCacheAge
- DOMonthlyUploadDataCap
- DOMinBackgroundQos
- DOModifyCacheDrive
- DOMaxBackgroundDownloadBandwidth
- DOMaxForegroundDownloadBandwidth
- DOPercentageMaxBackgroundBandwidth
- DOPercentageMaxForegroundBandwidth
- DOMinFileSizeToCache
- DOAllowVPNPeerCaching
- DOMinRAMAllowedToPeer
- DOMinDiskSizeAllowedToPeer
- DOMinBatteryPercentageAllowedToUpload
- DOCacheHost
- DOCacheHostSource
- DODisallowCacheServerDownloadsOnVPN
- DOGroupIdSource
- DODelayBackgroundDownloadFromHttp
- DODelayForegroundDownloadFromHttp
- DODelayCacheServerFallbackBackground
- DODelayCacheServerFallbackForeground
- DORestrictPeerSelectionBy
- DOVpnKeywords
DeviceGuard
- EnableVirtualizationBasedSecurity
- RequirePlatformSecurityFeatures
- LsaCfgFlags
- ConfigureSystemGuardLaunch
DeviceLock
- MinimumPasswordAge
- MaximumPasswordAge
- ClearTextPassword
- PasswordComplexity
- PasswordHistorySize
- AllowAdministratorLockout
- MinimumPasswordLength
- MinimumPasswordLengthAudit
- RelaxMinimumPasswordLengthLimits
Display
- EnablePerProcessDpi
- TurnOnGdiDPIScalingForApps
- TurnOffGdiDPIScalingForApps
- EnablePerProcessDpiForApps
- DisablePerProcessDpiForApps
DmaGuard
Education
Experience
- AllowScreenRecorder
- AllowSpotlightCollection
- AllowThirdPartySuggestionsInWindowsSpotlight
- AllowWindowsSpotlight
- AllowWindowsSpotlightOnActionCenter
- AllowWindowsSpotlightOnSettings
- AllowWindowsSpotlightWindowsWelcomeExperience
- AllowTailoredExperiencesWithDiagnosticData
- ConfigureWindowsSpotlightOnLockScreen
- AllowCortana
- AllowWindowsConsumerFeatures
- AllowWindowsTips
- DoNotShowFeedbackNotifications
- AllowFindMyDevice
- AllowClipboardHistory
- DoNotSyncBrowserSettings
- PreventUsersFromTurningOnBrowserSyncing
- ShowLockOnUserTile
- DisableCloudOptimizedContent
- DisableConsumerAccountStateContent
- ConfigureChatIcon
ExploitGuard
FileExplorer
Handwriting
HumanPresence
- ForceInstantWake
- ForceInstantLock
- ForceLockTimeout
- ForceInstantDim
- ForceDisableWakeWhenBatterySaverOn
- ForceAllowWakeWhenExternalDisplayConnected
- ForceAllowLockWhenExternalDisplayConnected
- ForceAllowDimWhenExternalDisplayConnected
Kerberos
- PKInitHashAlgorithmConfiguration
- PKInitHashAlgorithmSHA1
- PKInitHashAlgorithmSHA256
- PKInitHashAlgorithmSHA384
- PKInitHashAlgorithmSHA512
- CloudKerberosTicketRetrievalEnabled
LanmanWorkstation
Licensing
LocalPoliciesSecurityOptions
- Accounts_EnableAdministratorAccountStatus
- Accounts_BlockMicrosoftAccounts
- Accounts_EnableGuestAccountStatus
- Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly
- Accounts_RenameAdministratorAccount
- Accounts_RenameGuestAccount
- Devices_AllowUndockWithoutHavingToLogon
- Devices_AllowedToFormatAndEjectRemovableMedia
- Devices_PreventUsersFromInstallingPrinterDriversWhenConnectingToSharedPrinters
- Devices_RestrictCDROMAccessToLocallyLoggedOnUserOnly
- Devices_RestrictFloppyAccessToLocallyLoggedOnUserOnly
- DomainMember_DigitallyEncryptOrSignSecureChannelDataAlways
- DomainMember_DigitallyEncryptSecureChannelDataWhenPossible
- DomainMember_DigitallySignSecureChannelDataWhenPossible
- DomainMember_DisableMachineAccountPasswordChanges
- DomainMember_MaximumMachineAccountPasswordAge
- DomainMember_RequireStrongSessionKey
- InteractiveLogon_DisplayUserInformationWhenTheSessionIsLocked
- InteractiveLogon_DoNotRequireCTRLALTDEL
- InteractiveLogon_DoNotDisplayLastSignedIn
- InteractiveLogon_DoNotDisplayUsernameAtSignIn
- InteractiveLogon_MachineAccountLockoutThreshold
- InteractiveLogon_MachineInactivityLimit
- InteractiveLogon_MessageTextForUsersAttemptingToLogOn
- InteractiveLogon_MessageTitleForUsersAttemptingToLogOn
- InteractiveLogon_SmartCardRemovalBehavior
- MicrosoftNetworkClient_DigitallySignCommunicationsAlways
- MicrosoftNetworkClient_DigitallySignCommunicationsIfServerAgrees
- MicrosoftNetworkClient_SendUnencryptedPasswordToThirdPartySMBServers
- MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingSession
- MicrosoftNetworkServer_DigitallySignCommunicationsAlways
- MicrosoftNetworkServer_DigitallySignCommunicationsIfClientAgrees
- NetworkAccess_AllowAnonymousSIDOrNameTranslation
- NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts
- NetworkAccess_DoNotAllowAnonymousEnumerationOfSamAccountsAndShares
- NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers
- NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares
- NetworkAccess_RestrictClientsAllowedToMakeRemoteCallsToSAM
- NetworkSecurity_AllowLocalSystemToUseComputerIdentityForNTLM
- NetworkSecurity_AllowPKU2UAuthenticationRequests
- NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange
- NetworkSecurity_ForceLogoffWhenLogonHoursExpire
- NetworkSecurity_LANManagerAuthenticationLevel
- NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedClients
- NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServers
- NetworkSecurity_RestrictNTLM_AddRemoteServerExceptionsForNTLMAuthentication
- NetworkSecurity_RestrictNTLM_AuditIncomingNTLMTraffic
- NetworkSecurity_RestrictNTLM_IncomingNTLMTraffic
- NetworkSecurity_RestrictNTLM_OutgoingNTLMTrafficToRemoteServers
- RecoveryConsole_AllowAutomaticAdministrativeLogon
- Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOn
- Shutdown_ClearVirtualMemoryPageFile
- SystemObjects_RequireCaseInsensitivityForNonWindowsSubsystems
- UserAccountControl_UseAdminApprovalMode
- UserAccountControl_AllowUIAccessApplicationsToPromptForElevation
- UserAccountControl_BehaviorOfTheElevationPromptForAdministrators
- UserAccountControl_BehaviorOfTheElevationPromptForEnhancedAdministrators
- UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers
- UserAccountControl_OnlyElevateExecutableFilesThatAreSignedAndValidated
- UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations
- UserAccountControl_RunAllAdministratorsInAdminApprovalMode
- UserAccountControl_TypeOfAdminApprovalMode
- UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevation
- UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPerUserLocations
- UserAccountControl_DetectApplicationInstallationsAndPromptForElevation
LocalSecurityAuthority
LockDown
Maps
Messaging
Multitasking
NetworkIsolation
- EnterpriseCloudResources
- EnterpriseInternalProxyServers
- EnterpriseIPRange
- EnterpriseIPRangesAreAuthoritative
- EnterpriseProxyServers
- EnterpriseProxyServersAreAuthoritative
- NeutralResources
NewsAndInterests
Notifications
- DisallowNotificationMirroring
- DisallowTileNotification
- EnableExpandedToastNotifications
- DisableAccountNotifications
- DisallowCloudNotification
- WnsEndpoint
Power
- EnergySaverBatteryThresholdPluggedIn
- EnergySaverBatteryThresholdOnBattery
- SelectPowerButtonActionPluggedIn
- SelectPowerButtonActionOnBattery
- SelectSleepButtonActionPluggedIn
- SelectSleepButtonActionOnBattery
- SelectLidCloseActionPluggedIn
- SelectLidCloseActionOnBattery
- TurnOffHybridSleepPluggedIn
- TurnOffHybridSleepOnBattery
- UnattendedSleepTimeoutPluggedIn
- UnattendedSleepTimeoutOnBattery
Privacy
- DisablePrivacyExperience
- DisableAdvertisingId
- LetAppsGetDiagnosticInfo
- LetAppsGetDiagnosticInfo_ForceAllowTheseApps
- LetAppsGetDiagnosticInfo_ForceDenyTheseApps
- LetAppsGetDiagnosticInfo_UserInControlOfTheseApps
- LetAppsRunInBackground
- LetAppsRunInBackground_ForceAllowTheseApps
- LetAppsRunInBackground_ForceDenyTheseApps
- LetAppsRunInBackground_UserInControlOfTheseApps
- AllowInputPersonalization
- LetAppsAccessAccountInfo
- LetAppsAccessAccountInfo_ForceAllowTheseApps
- LetAppsAccessAccountInfo_ForceDenyTheseApps
- LetAppsAccessAccountInfo_UserInControlOfTheseApps
- LetAppsAccessCalendar
- LetAppsAccessCalendar_ForceAllowTheseApps
- LetAppsAccessCalendar_ForceDenyTheseApps
- LetAppsAccessCalendar_UserInControlOfTheseApps
- LetAppsAccessCallHistory
- LetAppsAccessCallHistory_ForceAllowTheseApps
- LetAppsAccessCallHistory_ForceDenyTheseApps
- LetAppsAccessCallHistory_UserInControlOfTheseApps
- LetAppsAccessCamera
- LetAppsAccessCamera_ForceAllowTheseApps
- LetAppsAccessCamera_ForceDenyTheseApps
- LetAppsAccessCamera_UserInControlOfTheseApps
- LetAppsAccessContacts
- LetAppsAccessContacts_ForceAllowTheseApps
- LetAppsAccessContacts_ForceDenyTheseApps
- LetAppsAccessContacts_UserInControlOfTheseApps
- LetAppsAccessEmail
- LetAppsAccessEmail_ForceAllowTheseApps
- LetAppsAccessEmail_ForceDenyTheseApps
- LetAppsAccessEmail_UserInControlOfTheseApps
- LetAppsAccessGenerativeAI
- LetAppsAccessGenerativeAI_ForceAllowTheseApps
- LetAppsAccessGenerativeAI_ForceDenyTheseApps
- LetAppsAccessGenerativeAI_UserInControlOfTheseApps
- LetAppsAccessGraphicsCaptureProgrammatic
- LetAppsAccessGraphicsCaptureProgrammatic_ForceAllowTheseApps
- LetAppsAccessGraphicsCaptureProgrammatic_ForceDenyTheseApps
- LetAppsAccessGraphicsCaptureProgrammatic_UserInControlOfTheseApps
- LetAppsAccessGraphicsCaptureWithoutBorder
- LetAppsAccessGraphicsCaptureWithoutBorder_ForceAllowTheseApps
- LetAppsAccessGraphicsCaptureWithoutBorder_ForceDenyTheseApps
- LetAppsAccessGraphicsCaptureWithoutBorder_UserInControlOfTheseApps
- LetAppsAccessHumanPresence
- LetAppsAccessHumanPresence_ForceAllowTheseApps
- LetAppsAccessHumanPresence_ForceDenyTheseApps
- LetAppsAccessHumanPresence_UserInControlOfTheseApps
- LetAppsAccessLocation
- LetAppsAccessLocation_ForceAllowTheseApps
- LetAppsAccessLocation_ForceDenyTheseApps
- LetAppsAccessLocation_UserInControlOfTheseApps
- LetAppsAccessMessaging
- LetAppsAccessMessaging_ForceAllowTheseApps
- LetAppsAccessMessaging_ForceDenyTheseApps
- LetAppsAccessMessaging_UserInControlOfTheseApps
- LetAppsAccessMicrophone
- LetAppsAccessMicrophone_ForceAllowTheseApps
- LetAppsAccessMicrophone_ForceDenyTheseApps
- LetAppsAccessMicrophone_UserInControlOfTheseApps
- LetAppsAccessMotion
- LetAppsAccessMotion_ForceAllowTheseApps
- LetAppsAccessMotion_ForceDenyTheseApps
- LetAppsAccessMotion_UserInControlOfTheseApps
- LetAppsAccessNotifications
- LetAppsAccessNotifications_ForceAllowTheseApps
- LetAppsAccessNotifications_ForceDenyTheseApps
- LetAppsAccessNotifications_UserInControlOfTheseApps
- LetAppsAccessPhone
- LetAppsAccessPhone_ForceAllowTheseApps
- LetAppsAccessPhone_ForceDenyTheseApps
- LetAppsAccessPhone_UserInControlOfTheseApps
- LetAppsAccessRadios
- LetAppsAccessRadios_ForceAllowTheseApps
- LetAppsAccessRadios_ForceDenyTheseApps
- LetAppsAccessRadios_UserInControlOfTheseApps
- LetAppsAccessTasks
- LetAppsAccessTasks_ForceAllowTheseApps
- LetAppsAccessTasks_ForceDenyTheseApps
- LetAppsAccessTasks_UserInControlOfTheseApps
- LetAppsAccessTrustedDevices
- LetAppsAccessTrustedDevices_ForceAllowTheseApps
- LetAppsAccessTrustedDevices_ForceDenyTheseApps
- LetAppsAccessTrustedDevices_UserInControlOfTheseApps
- LetAppsSyncWithDevices
- LetAppsSyncWithDevices_ForceAllowTheseApps
- LetAppsSyncWithDevices_ForceDenyTheseApps
- LetAppsSyncWithDevices_UserInControlOfTheseApps
- EnableActivityFeed
- PublishUserActivities
- UploadUserActivities
- AllowCrossDeviceClipboard
- LetAppsActivateWithVoice
- LetAppsActivateWithVoiceAboveLock
RemoteDesktop
Search
- AllowIndexingEncryptedStoresOrItems
- AllowSearchToUseLocation
- AllowUsingDiacritics
- AlwaysUseAutoLangDetection
- DisableBackoff
- DisableRemovableDriveIndexing
- DisableSearch
- PreventIndexingLowDiskSpaceMB
- PreventRemoteQueries
- AllowCloudSearch
- DoNotUseWebResults
- AllowCortanaInAAD
- AllowFindMyFiles
- AllowSearchHighlights
- ConfigureSearchOnTaskbarMode
Security
Settings
SmartScreen
Speech
Start
- ForceStartSize
- DisableContextMenus
- ShowOrHideMostUsedApps
- HideFrequentlyUsedApps
- HideRecentlyAddedApps
- HidePeopleBar
- StartLayout
- ConfigureStartPins
- HideRecommendedSection
- HideRecommendedPersonalizedSites
- HideTaskViewButton
- DisableControlCenter
- SimplifyQuickSettings
- DisableEditingQuickSettings
Storage
- AllowDiskHealthModelUpdates
- RemovableDiskDenyWriteAccess
- AllowStorageSenseGlobal
- ConfigStorageSenseGlobalCadence
- AllowStorageSenseTemporaryFilesCleanup
- ConfigStorageSenseRecycleBinCleanupThreshold
- ConfigStorageSenseDownloadsCleanupThreshold
- ConfigStorageSenseCloudContentDehydrationThreshold
Sudo
System
- AllowTelemetry
- AllowBuildPreview
- AllowFontProviders
- AllowLocation
- TelemetryProxy
- DisableOneDriveFileSync
- AllowWUfBCloudProcessing
- AllowUpdateComplianceProcessing
- AllowDesktopAnalyticsProcessing
- DisableEnterpriseAuthProxy
- LimitEnhancedDiagnosticDataWindowsAnalytics
- AllowDeviceNameInDiagnosticData
- ConfigureTelemetryOptInSettingsUx
- ConfigureTelemetryOptInChangeNotification
- DisableDeviceDelete
- DisableDiagnosticDataViewer
- ConfigureMicrosoft365UploadEndpoint
- TurnOffFileHistory
- DisableDirectXDatabaseUpdate
- AllowCommercialDataPipeline
- LimitDiagnosticLogCollection
- LimitDumpCollection
- EnableOneSettingsAuditing
- DisableOneSettingsDownloads
- HideUnsupportedHardwareNotifications
SystemServices
- ConfigureComputerBrowserServiceStartupMode
- ConfigureHomeGroupListenerServiceStartupMode
- ConfigureHomeGroupProviderServiceStartupMode
- ConfigureIISAdminServiceStartupMode
- ConfigureInfraredMonitorServiceStartupMode
- ConfigureInternetConnectionSharingServiceStartupMode
- ConfigureLxssManagerServiceStartupMode
- ConfigureMicrosoftFTPServiceStartupMode
- ConfigureRemoteProcedureCallLocatorServiceStartupMode
- ConfigureRoutingAndRemoteAccessServiceStartupMode
- ConfigureSimpleTCPIPServicesStartupMode
- ConfigureSpecialAdministrationConsoleHelperServiceStartupMode
- ConfigureSSDPDiscoveryServiceStartupMode
- ConfigureUPnPDeviceHostServiceStartupMode
- ConfigureWebManagementServiceStartupMode
- ConfigureWindowsMediaPlayerNetworkSharingServiceStartupMode
- ConfigureWindowsMobileHotspotServiceStartupMode
- ConfigureWorldWideWebPublishingServiceStartupMode
- ConfigureXboxAccessoryManagementServiceStartupMode
- ConfigureXboxLiveAuthManagerServiceStartupMode
- ConfigureXboxLiveGameSaveServiceStartupMode
- ConfigureXboxLiveNetworkingServiceStartupMode
TextInput
- AllowLanguageFeaturesUninstall
- AllowLinguisticDataCollection
- ConfigureSimplifiedChineseIMEVersion
- ConfigureTraditionalChineseIMEVersion
- ConfigureJapaneseIMEVersion
- ConfigureKoreanIMEVersion
TimeLanguageSettings
- RestrictLanguagePacksAndFeaturesInstall
- BlockCleanupOfUnusedPreinstalledLangPacks
- MachineUILanguageOverwrite
Troubleshooting
Update
- ActiveHoursEnd
- ActiveHoursStart
- ActiveHoursMaxRange
- AutoRestartRequiredNotificationDismissal
- AutoRestartNotificationSchedule
- SetAutoRestartNotificationDisable
- ScheduleRestartWarning
- ScheduleImminentRestartWarning
- AllowAutoUpdate
- AutoRestartDeadlinePeriodInDays
- AutoRestartDeadlinePeriodInDaysForFeatureUpdates
- EngagedRestartTransitionSchedule
- EngagedRestartSnoozeSchedule
- EngagedRestartDeadline
- EngagedRestartTransitionScheduleForFeatureUpdates
- EngagedRestartSnoozeScheduleForFeatureUpdates
- EngagedRestartDeadlineForFeatureUpdates
- DetectionFrequency
- ManagePreviewBuilds
- BranchReadinessLevel
- ProductVersion
- TargetReleaseVersion
- AllowUpdateService
- DeferFeatureUpdatesPeriodInDays
- DeferQualityUpdatesPeriodInDays
- DeferUpdatePeriod
- DeferUpgradePeriod
- ExcludeWUDriversInQualityUpdate
- PauseDeferrals
- PauseFeatureUpdates
- PauseQualityUpdates
- PauseFeatureUpdatesStartTime
- PauseQualityUpdatesStartTime
- RequireDeferUpgrade
- AllowMUUpdateService
- ScheduledInstallDay
- ScheduledInstallTime
- ScheduledInstallEveryWeek
- ScheduledInstallFirstWeek
- ScheduledInstallSecondWeek
- ScheduledInstallThirdWeek
- ScheduledInstallFourthWeek
- UpdateServiceUrl
- UpdateServiceUrlAlternate
- FillEmptyContentUrls
- SetProxyBehaviorForUpdateDetection
- DoNotEnforceEnterpriseTLSCertPinningForUpdateDetection
- SetPolicyDrivenUpdateSourceForFeatureUpdates
- SetPolicyDrivenUpdateSourceForQualityUpdates
- SetPolicyDrivenUpdateSourceForDriverUpdates
- SetPolicyDrivenUpdateSourceForOtherUpdates
- SetEDURestart
- AllowAutoWindowsUpdateDownloadOverMeteredNetwork
- AllowTemporaryEnterpriseFeatureControl
- SetDisableUXWUAccess
- SetDisablePauseUXAccess
- UpdateNotificationLevel
- NoUpdateNotificationsDuringActiveHours
- DisableDualScan
- AutomaticMaintenanceWakeUp
- ConfigureDeadlineForQualityUpdates
- ConfigureDeadlineForFeatureUpdates
- ConfigureDeadlineGracePeriod
- ConfigureDeadlineGracePeriodForFeatureUpdates
- ConfigureDeadlineNoAutoReboot
- ConfigureDeadlineNoAutoRebootForFeatureUpdates
- ConfigureDeadlineNoAutoRebootForQualityUpdates
- AllowOptionalContent
- AlwaysAutoRebootAtScheduledTimeMinutes
UserRights
- AccessCredentialManagerAsTrustedCaller
- AccessFromNetwork
- ActAsPartOfTheOperatingSystem
- AllowLocalLogOn
- BackupFilesAndDirectories
- ChangeSystemTime
- CreatePageFile
- CreateToken
- CreateGlobalObjects
- CreatePermanentSharedObjects
- CreateSymbolicLinks
- DebugPrograms
- DenyAccessFromNetwork
- DenyLocalLogOn
- DenyRemoteDesktopServicesLogOn
- EnableDelegation
- RemoteShutdown
- GenerateSecurityAudits
- ImpersonateClient
- IncreaseSchedulingPriority
- LoadUnloadDeviceDrivers
- LockMemory
- ManageAuditingAndSecurityLog
- ModifyObjectLabel
- ModifyFirmwareEnvironment
- ManageVolume
- ProfileSingleProcess
- RestoreFilesAndDirectories
- TakeOwnership
- BypassTraverseChecking
- ReplaceProcessLevelToken
- ChangeTimeZone
- ShutDownTheSystem
- LogOnAsBatchJob
- ProfileSystemPerformance
- DenyLogOnAsBatchJob
- LogOnAsService
- IncreaseProcessWorkingSet
- DenyLogOnAsService
- AdjustMemoryQuotasForProcess
- AllowLogOnThroughRemoteDesktop
VirtualizationBasedTechnology
WebThreatDefense
Wifi
WindowsAI
WindowsDefenderSecurityCenter
- CompanyName
- DisableAppBrowserUI
- DisableEnhancedNotifications
- DisableFamilyUI
- DisableAccountProtectionUI
- DisableClearTpmButton
- DisableDeviceSecurityUI
- DisableHealthUI
- DisableNetworkUI
- DisableNotifications
- DisableTpmFirmwareUpdateWarning
- DisableVirusUI
- DisallowExploitProtectionOverride
- EnableCustomizedToasts
- EnableInAppCustomization
- HideRansomwareDataRecovery
- HideSecureBoot
- HideTPMTroubleshooting
- HideWindowsSecurityNotificationAreaControl
- Phone
- URL
WindowsInkWorkspace
WindowsLogon
WindowsSandbox
- AllowVGPU
- AllowNetworking
- AllowAudioInput
- AllowVideoInput
- AllowPrinterRedirection
- AllowClipboardRedirection
- AllowMappedFolders
- AllowWriteToMappedFolders