This policy allows an administrator to set default file type and protocol associations. When set, default associations will be applied on sign-in to the PC. The association file can be created using the DISM tool (dism /online /export-defaultappassociations:appassoc.xml). The file can be further edited by adding attributes to control how often associations are applied by the policy. The file then needs to be base64 encoded before being added to SyncML. If policy is enabled and the client machine is Microsoft Entra joined, the associations assigned in SyncML will be processed and default associations will be applied.
Pastaba
For this policy, MDM policy take precedence over group policies even when MDMWinsOverGP policy is not set.
Description framework properties:
Property name
Property value
Format
chr (string)
Access Type
Add, Delete, Get, Replace
Group policy mapping:
Name
Value
Name
DefaultAssociationsConfiguration
Friendly Name
Set a default associations configuration file
Element Name
Default Associations Configuration File.
Location
Computer Configuration
Path
WindowsComponents > File Explorer
Registry Key Name
Software\Policies\Microsoft\Windows\System
ADMX File Name
WindowsExplorer.admx
Example:
To create the SyncML, follow these steps:
Install a few apps and change your defaults.
From an elevated prompt, run dism /online /export-defaultappassociations:C:\appassoc.xml. Here's an example output from the dism default association export command:
Starting in Windows 11, version 22H2, two new attributes are available for further customization of the policy. These attributes can be used to change how often the policy associations are applied.
Version attribute for DefaultAssociations. This attribute is used to control when Suggested associations are applied. Whenever the Version value is incremented, a Suggested association is applied one time.
Suggested attribute for Association. The default value is false. If it's false, the Association is applied on every sign-in. If it's true, the Association is only applied once for the current DefaultAssociations Version. When the Version is incremented, the Association is applied once again, on next sign-in.
In the following example, the Association for .htm is applied on first sign-in of the user, and all others are applied on every sign-in. If Version is incremented, and the updated file is deployed to the user, the Association for .htm is applied again:
Plan and execute an endpoint deployment strategy, using essential elements of modern management, co-management approaches, and Microsoft Intune integration.
See a list of all the settings and their descriptions for creating device restrictions on Windows 10/11 client devices. Use these settings in a configuration profile to control screenshots, password requirements, kiosk settings, apps in the store, Microsoft Edge browser, Microsoft Defender, access to the cloud, start menu, and more in Microsoft Intune.