Policy CSP - Privacy


Privacy policies

Privacy/AllowAutoAcceptPairingAndPrivacyConsentPrompts
Privacy/AllowCrossDeviceClipboard
Privacy/AllowInputPersonalization
Privacy/DisableAdvertisingId
Privacy/DisablePrivacyExperience
Privacy/EnableActivityFeed
Privacy/LetAppsAccessAccountInfo
Privacy/LetAppsAccessAccountInfo_ForceAllowTheseApps
Privacy/LetAppsAccessAccountInfo_ForceDenyTheseApps
Privacy/LetAppsAccessAccountInfo_UserInControlOfTheseApps
Privacy/LetAppsAccessBackgroundSpatialPerception
Privacy/LetAppsAccessBackgroundSpatialPerception_ForceAllowTheseApps
Privacy/LetAppsAccessBackgroundSpatialPerception_ForceDenyTheseApps
Privacy/LetAppsAccessBackgroundSpatialPerception_UserInControlOfTheseApps
Privacy/LetAppsAccessCalendar
Privacy/LetAppsAccessCalendar_ForceAllowTheseApps
Privacy/LetAppsAccessCalendar_ForceDenyTheseApps
Privacy/LetAppsAccessCalendar_UserInControlOfTheseApps
Privacy/LetAppsAccessCallHistory
Privacy/LetAppsAccessCallHistory_ForceAllowTheseApps
Privacy/LetAppsAccessCallHistory_ForceDenyTheseApps
Privacy/LetAppsAccessCallHistory_UserInControlOfTheseApps
Privacy/LetAppsAccessCamera
Privacy/LetAppsAccessCamera_ForceAllowTheseApps
Privacy/LetAppsAccessCamera_ForceDenyTheseApps
Privacy/LetAppsAccessCamera_UserInControlOfTheseApps
Privacy/LetAppsAccessContacts
Privacy/LetAppsAccessContacts_ForceAllowTheseApps
Privacy/LetAppsAccessContacts_ForceDenyTheseApps
Privacy/LetAppsAccessContacts_UserInControlOfTheseApps
Privacy/LetAppsAccessEmail
Privacy/LetAppsAccessEmail_ForceAllowTheseApps
Privacy/LetAppsAccessEmail_ForceDenyTheseApps
Privacy/LetAppsAccessEmail_UserInControlOfTheseApps
Privacy/LetAppsAccessGazeInput
Privacy/LetAppsAccessGazeInput_ForceAllowTheseApps
Privacy/LetAppsAccessGazeInput_ForceDenyTheseApps
Privacy/LetAppsAccessGazeInput_UserInControlOfTheseApps
Privacy/LetAppsAccessLocation
Privacy/LetAppsAccessLocation_ForceAllowTheseApps
Privacy/LetAppsAccessLocation_ForceDenyTheseApps
Privacy/LetAppsAccessLocation_UserInControlOfTheseApps
Privacy/LetAppsAccessMessaging
Privacy/LetAppsAccessMessaging_ForceAllowTheseApps
Privacy/LetAppsAccessMessaging_ForceDenyTheseApps
Privacy/LetAppsAccessMessaging_UserInControlOfTheseApps
Privacy/LetAppsAccessMicrophone
Privacy/LetAppsAccessMicrophone_ForceAllowTheseApps
Privacy/LetAppsAccessMicrophone_ForceDenyTheseApps
Privacy/LetAppsAccessMicrophone_UserInControlOfTheseApps
Privacy/LetAppsAccessMotion
Privacy/LetAppsAccessMotion_ForceAllowTheseApps
Privacy/LetAppsAccessMotion_ForceDenyTheseApps
Privacy/LetAppsAccessMotion_UserInControlOfTheseApps
Privacy/LetAppsAccessNotifications
Privacy/LetAppsAccessNotifications_ForceAllowTheseApps
Privacy/LetAppsAccessNotifications_ForceDenyTheseApps
Privacy/LetAppsAccessNotifications_UserInControlOfTheseApps
Privacy/LetAppsAccessPhone
Privacy/LetAppsAccessPhone_ForceAllowTheseApps
Privacy/LetAppsAccessPhone_ForceDenyTheseApps
Privacy/LetAppsAccessPhone_UserInControlOfTheseApps
Privacy/LetAppsAccessRadios
Privacy/LetAppsAccessRadios_ForceAllowTheseApps
Privacy/LetAppsAccessRadios_ForceDenyTheseApps
Privacy/LetAppsAccessRadios_UserInControlOfTheseApps
Privacy/LetAppsAccessTasks
Privacy/LetAppsAccessTasks_ForceAllowTheseApps
Privacy/LetAppsAccessTasks_ForceDenyTheseApps
Privacy/LetAppsAccessTasks_UserInControlOfTheseApps
Privacy/LetAppsAccessTrustedDevices
Privacy/LetAppsAccessTrustedDevices_ForceAllowTheseApps
Privacy/LetAppsAccessTrustedDevices_ForceDenyTheseApps
Privacy/LetAppsAccessTrustedDevices_UserInControlOfTheseApps
Privacy/LetAppsActivateWithVoice
Privacy/LetAppsActivateWithVoiceAboveLock
Privacy/LetAppsGetDiagnosticInfo
Privacy/LetAppsGetDiagnosticInfo_ForceAllowTheseApps
Privacy/LetAppsGetDiagnosticInfo_ForceDenyTheseApps
Privacy/LetAppsGetDiagnosticInfo_UserInControlOfTheseApps
Privacy/LetAppsRunInBackground
Privacy/LetAppsRunInBackground_ForceAllowTheseApps
Privacy/LetAppsRunInBackground_ForceDenyTheseApps
Privacy/LetAppsRunInBackground_UserInControlOfTheseApps
Privacy/LetAppsSyncWithDevices
Privacy/LetAppsSyncWithDevices_ForceAllowTheseApps
Privacy/LetAppsSyncWithDevices_ForceDenyTheseApps
Privacy/LetAppsSyncWithDevices_UserInControlOfTheseApps
Privacy/PublishUserActivities
Privacy/UploadUserActivities

Privacy/AllowAutoAcceptPairingAndPrivacyConsentPrompts

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Allows or disallows the automatic acceptance of the pairing and privacy user consent dialog when launching apps.

Note

There were issues reported with the previous release of this policy and a fix was added in Windows 10, version 1709.

Most restricted value is 0.

The following list shows the supported values:

  • 0 (default)– Not allowed.
  • 1 – Allowed.

Privacy/AllowCrossDeviceClipboard

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies whether clipboard items roam across devices. When this is allowed, an item copied to the clipboard is uploaded to the cloud so that other devices can access. Also, when this is allowed, a new clipboard item on the cloud is downloaded to a device so that user can paste on the device.

Most restricted value is 0.

ADMX Info:

  • GP Friendly name: Allow Clipboard synchronization across devices
  • GP name: AllowCrossDeviceClipboard
  • GP path: System/OS Policies
  • GP ADMX file name: OSPolicy.admx

The following list shows the supported values:

0 – Not allowed. 1 (default) – Allowed.


Privacy/AllowInputPersonalization

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Updated in Windows 10, version 1809. This policy specifies whether users on the device have the option to enable online speech recognition. When enabled, users can use their voice for dictation, and talk to Cortana and other apps that use Microsoft cloud-based speech recognition. Microsoft will use voice input to help improve our speech services. If the policy value is set to 0, online speech recognition will be disabled and users cannot enable online speech recognition via settings. If policy value is set to 1 or is not configured, control is deferred to users.

Most restricted value is 0.

ADMX Info:

  • GP Friendly name: Allow input personalization
  • GP name: AllowInputPersonalization
  • GP path: Control Panel/Regional and Language Options
  • GP ADMX file name: Globalization.admx

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Choice deferred to user's preference.

Privacy/DisableAdvertisingId

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Enables or disables the Advertising ID.

Most restricted value is 0.

ADMX Info:

  • GP Friendly name: Turn off the advertising ID
  • GP name: DisableAdvertisingId
  • GP path: System/User Profiles
  • GP ADMX file name: UserProfiles.admx

The following list shows the supported values:

  • 0 – Disabled.
  • 1 – Enabled.
  • 65535 (default)- Not configured.

Privacy/DisablePrivacyExperience

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • User
  • Device

Enabling this policy prevents the privacy experience from launching during user logon for new and upgraded users.

Supported value type is integer.

  • 0 (default) - Allow the "choose privacy settings for your device" screen for a new user during their first logon or when an existing user logs in for the first time after an upgrade.
  • 1 - Do not allow the "choose privacy settings for your device" screen when a new user logs in or an existing user logs in for the first time after an upgrade.

In some enterprise managed environments, the privacy settings may be set by policies. In these cases, you can use this policy if you do not want to show a screen that would prompt your users to change these privacy settings.

ADMX Info:

  • GP Friendly name: Don't launch privacy settings experience on user logon
  • GP name: DisablePrivacyExperience
  • GP path: Windows Components/OOBE
  • GP ADMX file name: OOBE.admx

Privacy/EnableActivityFeed

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Allows IT Admins to allow Apps/OS to publish to the activity feed.

ADMX Info:

  • GP Friendly name: Enables Activity Feed
  • GP name: EnableActivityFeed
  • GP path: System/OS Policies
  • GP ADMX file name: OSPolicy.admx

The following list shows the supported values:

  • 0 – Disabled. Apps/OS can't publish the activities and roaming is disabled (not published to the cloud).
  • 1 – (default) Enabled. Apps/OS can publish the activities and will be roamed across device graph.

Privacy/LetAppsAccessAccountInfo

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies whether Windows apps can access account information.

Most restricted value is 2.

ADMX Info:

  • GP Friendly name: Let Windows apps access account information
  • GP name: LetAppsAccessAccountInfo
  • GP element: LetAppsAccessAccountInfo_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessAccountInfo_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are allowed access to account information. This setting overrides the default LetAppsAccessAccountInfo policy setting for the specified Windows apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access account information
  • GP name: LetAppsAccessAccountInfo
  • GP element: LetAppsAccessAccountInfo_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessAccountInfo_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are denied access to account information. This setting overrides the default LetAppsAccessAccountInfo policy setting for the specified Windows apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access account information
  • GP name: LetAppsAccessAccountInfo
  • GP element: LetAppsAccessAccountInfo_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessAccountInfo_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Windows apps. The user is able to control the account information privacy setting for the listed Windows apps. This setting overrides the default LetAppsAccessAccountInfo policy setting for the specified Windows apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access account information
  • GP name: LetAppsAccessAccountInfo
  • GP element: LetAppsAccessAccountInfo_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessBackgroundSpatialPerception

Edition Windows 10 Windows 11
Home No No
Pro No No
Windows SE No No
Business No No
Enterprise No No
Education No No

Scope:

  • Device

Note

Currently, this policy is supported only in HoloLens 2.

Specifies whether Windows apps can access the movement of the user's head, hands, motion controllers, and other tracked objects, while the apps are running in the background.

Supported value type is integer.

ADMX Info:

  • GP Friendly name: Let Windows apps access background spatial perception
  • GP name: LetAppsAccessBackgroundSpatialPerception
  • GP element: LetAppsAccessBackgroundSpatialPerception_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 (default) – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessBackgroundSpatialPerception_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home No No
Pro No No
Windows SE No No
Business No No
Enterprise No No
Education No No

Scope:

  • Device

Note

Currently, this policy is supported only in HoloLens 2.

List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to the user's movements while the apps are running in the background. This setting overrides the default LetAppsAccessBackgroundSpatialPerception policy setting for the specified apps.

Supported value type is chr.

ADMX Info:

  • GP Friendly name: Let Windows apps access background spatial perception
  • GP name: LetAppsAccessBackgroundSpatialPerception
  • GP element: LetAppsAccessBackgroundSpatialPerception_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessBackgroundSpatialPerception_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home No No
Pro No No
Windows SE No No
Business No No
Enterprise No No
Education No No

Scope:

  • Device

Note

Currently, this policy is supported only in HoloLens 2.

List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to the user's movements while the apps are running in the background. This setting overrides the default LetAppsAccessBackgroundSpatialPerception policy setting for the specified apps.

Supported value type is chr.

ADMX Info:

  • GP Friendly name: Let Windows apps access background spatial perception
  • GP name: LetAppsAccessBackgroundSpatialPerception
  • GP element: LetAppsAccessBackgroundSpatialPerception_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessBackgroundSpatialPerception_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home No No
Pro No No
Windows SE No No
Business No No
Enterprise No No
Education No No

Scope:

  • Device

Note

Currently, this policy is supported only in HoloLens 2.

List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the user movements privacy setting for the listed apps. This setting overrides the default LetAppsAccessBackgroundSpatialPerception policy setting for the specified apps.

Supported value type is chr.

ADMX Info:

  • GP Friendly name: Let Windows apps access background spatial perception
  • GP name: LetAppsAccessBackgroundSpatialPerception
  • GP element: LetAppsAccessBackgroundSpatialPerception_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCalendar

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies whether Windows apps can access the calendar.

Most restricted value is 2.

ADMX Info:

  • GP Friendly name: Let Windows apps access the calendar
  • GP name: LetAppsAccessCalendar
  • GP element: LetAppsAccessCalendar_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessCalendar_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are allowed access to the calendar. This setting overrides the default LetAppsAccessCalendar policy setting for the specified Windows apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access the calendar
  • GP name: LetAppsAccessCalendar
  • GP element: LetAppsAccessCalendar_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCalendar_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are denied access to the calendar. This setting overrides the default LetAppsAccessCalendar policy setting for the specified Windows apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access the calendar
  • GP name: LetAppsAccessCalendar
  • GP element: LetAppsAccessCalendar_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCalendar_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Windows apps. The user is able to control the calendar privacy setting for the listed Windows apps. This setting overrides the default LetAppsAccessCalendar policy setting for the specified Windows apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access the calendar
  • GP name: LetAppsAccessCalendar
  • GP element: LetAppsAccessCalendar_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCallHistory

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies whether Windows apps can access call history.

Most restricted value is 2.

ADMX Info:

  • GP Friendly name: Let Windows apps access call history
  • GP name: LetAppsAccessCallHistory
  • GP element: LetAppsAccessCallHistory_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessCallHistory_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are allowed access to call history. This setting overrides the default LetAppsAccessCallHistory policy setting for the specified Windows apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access call history
  • GP name: LetAppsAccessCallHistory
  • GP element: LetAppsAccessCallHistory_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCallHistory_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are denied access to call history. This setting overrides the default LetAppsAccessCallHistory policy setting for the specified Windows apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access call history
  • GP name: LetAppsAccessCallHistory
  • GP element: LetAppsAccessCallHistory_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCallHistory_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Windows apps. The user is able to control the call history privacy setting for the listed Windows apps. This setting overrides the default LetAppsAccessCallHistory policy setting for the specified Windows apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access call history
  • GP name: LetAppsAccessCallHistory
  • GP element: LetAppsAccessCallHistory_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCamera

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies whether Windows apps can access the camera.

Most restricted value is 2.

ADMX Info:

  • GP Friendly name: Let Windows apps access the camera
  • GP name: LetAppsAccessCamera
  • GP element: LetAppsAccessCamera_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessCamera_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access the camera
  • GP name: LetAppsAccessCamera
  • GP element: LetAppsAccessCamera_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCamera_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access the camera
  • GP name: LetAppsAccessCamera
  • GP element: LetAppsAccessCamera_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCamera_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the camera privacy setting for the listed apps. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access the camera
  • GP name: LetAppsAccessCamera
  • GP element: LetAppsAccessCamera_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessContacts

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies whether Windows apps can access contacts.

Most restricted value is 2.

ADMX Info:

  • GP Friendly name: Let Windows apps access contacts
  • GP name: LetAppsAccessContacts
  • GP element: LetAppsAccessContacts_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessContacts_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access contacts
  • GP name: LetAppsAccessContacts
  • GP element: LetAppsAccessContacts_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessContacts_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access contacts
  • GP name: LetAppsAccessContacts
  • GP element: LetAppsAccessContacts_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessContacts_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the contacts privacy setting for the listed apps. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access contacts
  • GP name: LetAppsAccessContacts
  • GP element: LetAppsAccessContacts_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessEmail

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies whether Windows apps can access email.

Most restricted value is 2.

ADMX Info:

  • GP Friendly name: Let Windows apps access email
  • GP name: LetAppsAccessEmail
  • GP element: LetAppsAccessEmail_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessEmail_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access email
  • GP name: LetAppsAccessEmail
  • GP element: LetAppsAccessEmail_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessEmail_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access email
  • GP name: LetAppsAccessEmail
  • GP element: LetAppsAccessEmail_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessEmail_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the email privacy setting for the listed apps. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access email
  • GP name: LetAppsAccessEmail
  • GP element: LetAppsAccessEmail_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessGazeInput

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

This policy setting specifies whether Windows apps can access the eye tracker.


Privacy/LetAppsAccessGazeInput_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are allowed access to the eye tracker. This setting overrides the default LetAppsAccessGazeInput policy setting for the specified apps.


Privacy/LetAppsAccessGazeInput_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Windows Store Apps. Listed apps are denied access to the eye tracker. This setting overrides the default LetAppsAccessGazeInput policy setting for the specified apps.


Privacy/LetAppsAccessGazeInput_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Windows Store Apps. The user is able to control the eye tracker privacy setting for the listed apps. This setting overrides the default LetAppsAccessGazeInput policy setting for the specified apps.


Privacy/LetAppsAccessLocation

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies whether Windows apps can access location.

Most restricted value is 2.

ADMX Info:

  • GP Friendly name: Let Windows apps access location
  • GP name: LetAppsAccessLocation
  • GP element: LetAppsAccessLocation_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessLocation_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access location
  • GP name: LetAppsAccessLocation
  • GP element: LetAppsAccessLocation_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessLocation_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access location
  • GP name: LetAppsAccessLocation
  • GP element: LetAppsAccessLocation_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessLocation_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the location privacy setting for the listed apps. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access location
  • GP name: LetAppsAccessLocation
  • GP element: LetAppsAccessLocation_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMessaging

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies whether Windows apps can read or send messages (text or MMS).

Most restricted value is 2.

ADMX Info:

  • GP Friendly name: Let Windows apps access messaging
  • GP name: LetAppsAccessMessaging
  • GP element: LetAppsAccessMessaging_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessMessaging_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access messaging
  • GP name: LetAppsAccessMessaging
  • GP element: LetAppsAccessMessaging_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMessaging_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are not allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access messaging
  • GP name: LetAppsAccessMessaging
  • GP element: LetAppsAccessMessaging_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMessaging_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the messaging privacy setting for the listed apps. This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access messaging
  • GP name: LetAppsAccessMessaging
  • GP element: LetAppsAccessMessaging_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMicrophone

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies whether Windows apps can access the microphone.

Most restricted value is 2.

ADMX Info:

  • GP Friendly name: Let Windows apps access the microphone
  • GP name: LetAppsAccessMicrophone
  • GP element: LetAppsAccessMicrophone_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessMicrophone_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access the microphone
  • GP name: LetAppsAccessMicrophone
  • GP element: LetAppsAccessMicrophone_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMicrophone_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access the microphone
  • GP name: LetAppsAccessMicrophone
  • GP element: LetAppsAccessMicrophone_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMicrophone_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the microphone privacy setting for the listed apps. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access the microphone
  • GP name: LetAppsAccessMicrophone
  • GP element: LetAppsAccessMicrophone_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMotion

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies whether Windows apps can access motion data.

Most restricted value is 2.

ADMX Info:

  • GP Friendly name: Let Windows apps access motion
  • GP name: LetAppsAccessMotion
  • GP element: LetAppsAccessMotion_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessMotion_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access motion
  • GP name: LetAppsAccessMotion
  • GP element: LetAppsAccessMotion_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMotion_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access motion
  • GP name: LetAppsAccessMotion
  • GP element: LetAppsAccessMotion_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMotion_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the motion privacy setting for the listed apps. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access motion
  • GP name: LetAppsAccessMotion
  • GP element: LetAppsAccessMotion_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessNotifications

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies whether Windows apps can access notifications.

Most restricted value is 2.

ADMX Info:

  • GP Friendly name: Let Windows apps access notifications
  • GP name: LetAppsAccessNotifications
  • GP element: LetAppsAccessNotifications_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessNotifications_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access notifications
  • GP name: LetAppsAccessNotifications
  • GP element: LetAppsAccessNotifications_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessNotifications_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access notifications
  • GP name: LetAppsAccessNotifications
  • GP element: LetAppsAccessNotifications_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessNotifications_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the notifications privacy setting for the listed apps. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access notifications
  • GP name: LetAppsAccessNotifications
  • GP element: LetAppsAccessNotifications_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessPhone

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies whether Windows apps can make phone calls.

Most restricted value is 2.

ADMX Info:

  • GP Friendly name: Let Windows apps make phone calls
  • GP name: LetAppsAccessPhone
  • GP element: LetAppsAccessPhone_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessPhone_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps make phone calls
  • GP name: LetAppsAccessPhone
  • GP element: LetAppsAccessPhone_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessPhone_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are not allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps make phone calls
  • GP name: LetAppsAccessPhone
  • GP element: LetAppsAccessPhone_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessPhone_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the phone call privacy setting for the listed apps. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps make phone calls
  • GP name: LetAppsAccessPhone
  • GP element: LetAppsAccessPhone_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessRadios

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies whether Windows apps have access to control radios.

Most restricted value is 2.

ADMX Info:

  • GP Friendly name: Let Windows apps control radios
  • GP name: LetAppsAccessRadios
  • GP element: LetAppsAccessRadios_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessRadios_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps control radios
  • GP name: LetAppsAccessRadios
  • GP element: LetAppsAccessRadios_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessRadios_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps control radios
  • GP name: LetAppsAccessRadios
  • GP element: LetAppsAccessRadios_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessRadios_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the radios privacy setting for the listed apps. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps control radios
  • GP name: LetAppsAccessRadios
  • GP element: LetAppsAccessRadios_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTasks

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies whether Windows apps can access tasks.

ADMX Info:

  • GP Friendly name: Let Windows apps access Tasks
  • GP name: LetAppsAccessTasks
  • GP element: LetAppsAccessTasks_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTasks_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access Tasks
  • GP name: LetAppsAccessTasks
  • GP element: LetAppsAccessTasks_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTasks_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access Tasks
  • GP name: LetAppsAccessTasks
  • GP element: LetAppsAccessTasks_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTasks_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the tasks privacy setting for the listed apps. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access Tasks
  • GP name: LetAppsAccessTasks
  • GP element: LetAppsAccessTasks_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTrustedDevices

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies whether Windows apps can access trusted devices.

Most restricted value is 2.

ADMX Info:

  • GP Friendly name: Let Windows apps access trusted devices
  • GP name: LetAppsAccessTrustedDevices
  • GP element: LetAppsAccessTrustedDevices_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessTrustedDevices_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access trusted devices
  • GP name: LetAppsAccessTrustedDevices
  • GP element: LetAppsAccessTrustedDevices_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTrustedDevices_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access trusted devices
  • GP name: LetAppsAccessTrustedDevices
  • GP element: LetAppsAccessTrustedDevices_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTrustedDevices_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'trusted devices' privacy setting for the listed apps. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access trusted devices
  • GP name: LetAppsAccessTrustedDevices
  • GP element: LetAppsAccessTrustedDevices_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsActivateWithVoice

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies if Windows apps can be activated by voice.

ADMX Info:

  • GP Friendly name: Allow voice activation
  • GP name: LetAppsActivateWithVoice
  • GP element: LetAppsActivateWithVoice_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 (default) – User in control. Users can decide if Windows apps can be activated by voice using Settings > Privacy options on the device.
  • 1 – Force allow. Windows apps can be activated by voice and users cannot change it.
  • 2 - Force deny. Windows apps cannot be activated by voice and users cannot change it.

Privacy/LetAppsActivateWithVoiceAboveLock

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies if Windows apps can be activated by voice while the screen is locked.

ADMX Info:

  • GP Friendly name: Allow voice activation above locked screen
  • GP name: LetAppsActivateWithVoiceAboveLock
  • GP element: LetAppsActivateWithVoiceAboveLock_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 (default) – User in control. Users can decide if Windows apps can be activated by voice while the screen is locked using Settings > Privacy options on the device.
  • 1 – Force allow. Windows apps can be activated by voice while the screen is locked, and users cannot change it.
  • 2 - Force deny. Windows apps cannot be activated by voice while the screen is locked, and users cannot change it.

Privacy/LetAppsGetDiagnosticInfo

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Force allow, force deny or give user control of apps that can get diagnostic information about other running apps.

Most restricted value is 2.

ADMX Info:

  • GP Friendly name: Let Windows apps access diagnostic information about other apps
  • GP name: LetAppsGetDiagnosticInfo
  • GP element: LetAppsGetDiagnosticInfo_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsGetDiagnosticInfo_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to diagnostic information about other running apps. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access diagnostic information about other apps
  • GP name: LetAppsGetDiagnosticInfo
  • GP element: LetAppsGetDiagnosticInfo_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsGetDiagnosticInfo_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to diagnostic information about other running apps. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access diagnostic information about other apps
  • GP name: LetAppsGetDiagnosticInfo
  • GP element: LetAppsGetDiagnosticInfo_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsGetDiagnosticInfo_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'get diagnostic info' privacy setting for the listed apps. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps access diagnostic information about other apps
  • GP name: LetAppsGetDiagnosticInfo
  • GP element: LetAppsGetDiagnosticInfo_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsRunInBackground

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies whether Windows apps can run in the background.

Most restricted value is 2.

Warning

Be careful when determining which apps should have their background activity disabled. Communication apps normally update tiles and notifications through background processes. Turning off background activity for these types of apps could cause text message, email, and voicemail notifications to not function. This could also cause background email syncing to not function properly.

ADMX Info:

  • GP Friendly name: Let Windows apps run in the background
  • GP name: LetAppsRunInBackground
  • GP element: LetAppsRunInBackground_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control (default).
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsRunInBackground_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are able to run in the background. This setting overrides the default LetAppsRunInBackground policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps run in the background
  • GP name: LetAppsRunInBackground
  • GP element: LetAppsRunInBackground_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsRunInBackground_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied the ability, to run in the background. This setting overrides the default LetAppsRunInBackground policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps run in the background
  • GP name: LetAppsRunInBackground
  • GP element: LetAppsRunInBackground_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsRunInBackground_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the background apps privacy setting for the listed apps. This setting overrides the default LetAppsRunInBackground policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps run in the background
  • GP name: LetAppsRunInBackground
  • GP element: LetAppsRunInBackground_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsSyncWithDevices

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Specifies whether Windows apps can sync with devices.

Most restricted value is 2.

ADMX Info:

  • GP Friendly name: Let Windows apps communicate with unpaired devices
  • GP name: LetAppsSyncWithDevices
  • GP element: LetAppsSyncWithDevices_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsSyncWithDevices_ForceAllowTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to sync with devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps communicate with unpaired devices
  • GP name: LetAppsSyncWithDevices
  • GP element: LetAppsSyncWithDevices_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsSyncWithDevices_ForceDenyTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to sync with devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps communicate with unpaired devices
  • GP name: LetAppsSyncWithDevices
  • GP element: LetAppsSyncWithDevices_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsSyncWithDevices_UserInControlOfTheseApps

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'sync with devices' privacy setting for the listed apps. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.

ADMX Info:

  • GP Friendly name: Let Windows apps communicate with unpaired devices
  • GP name: LetAppsSyncWithDevices
  • GP element: LetAppsSyncWithDevices_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/PublishUserActivities

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Allows IT Admins to enable publishing of user activities to the activity feed.

ADMX Info:

  • GP Friendly name: Allow publishing of User Activities
  • GP name: PublishUserActivities
  • GP path: System/OS Policies
  • GP ADMX file name: OSPolicy.admx

The following list shows the supported values:

  • 0 – Disabled. Apps/OS can't publish the user activities.
  • 1 – (default) Enabled. Apps/OS can publish the user activities.

Privacy/UploadUserActivities

Edition Windows 10 Windows 11
Home Yes Yes
Pro Yes Yes
Windows SE No Yes
Business Yes Yes
Enterprise Yes Yes
Education Yes Yes

Scope:

  • Device

Allows ActivityFeed to upload published 'User Activities'.

ADMX Info:

  • GP Friendly name: Allow upload of User Activities
  • GP name: UploadUserActivities
  • GP path: System/OS Policies
  • GP ADMX file name: OSPolicy.admx

Policy configuration service provider