This CSP contains some settings that are under development and only applicable for Windows Insider Preview builds. These settings are subject to change and may have dependencies on other features or services in preview.
AllowRecallEnablement
Scope
Editions
Applicable OS
✅ Device ❌ User
✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC
This policy setting allows you to determine whether the Recall optional component is available for end users to enable on their device. By default, Recall is disabled for managed commercial devices. Recall isn't available on managed devices by default, and individual users can't enable Recall on their own.
If this policy isn't configured, end users will have the Recall component in a disabled state.
If this policy is disabled, the Recall component will be in disabled state and the bits for Recall will be removed from the device. If snapshots were previously saved on the device, they'll be deleted when this policy is disabled. Removing Recall requires a device restart.
If the policy is enabled, end users will have Recall available on their device. Depending on the state of the DisableAIDataAnalysis policy (Turn off saving snapshots for use with Recall), end users will be able to choose if they want to save snapshots of their screen and use Recall to find things they've seen on their device.
Description framework properties:
Property name
Property value
Format
int
Access Type
Add, Delete, Get, Replace
Default Value
1
Allowed values:
Value
Description
0
Recall isn't available.
1 (Default)
Recall is available.
Group policy mapping:
Name
Value
Name
AllowRecallEnablement
Friendly Name
Allow Recall to be enabled
Location
Computer Configuration
Path
Windows Components > Windows AI
Registry Key Name
SOFTWARE\Policies\Microsoft\Windows\WindowsAI
Registry Value Name
AllowRecallEnablement
ADMX File Name
WindowsCopilot.admx
DisableAIDataAnalysis
Scope
Editions
Applicable OS
✅ Device ✅ User
✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC
This policy setting allows you to determine whether snapshots of the screen can be saved for use with Recall. By default, snapshots for Recall aren't enabled. IT administrators can't, on their own, enable saving snapshots on behalf of their users. The choice to enable saving snapshots requires individual user opt-in consent.
If the policy isn't configured, snapshots won't be saved for use with Recall.
If you enable this policy, snapshots won't be saved for use with Recall. If snapshots were previously saved on the device, they'll be deleted when this policy is enabled.
If you set this policy to disabled, end users will have a choice to save snapshots of their screen and use Recall to find things they've seen on their device.
Description framework properties:
Property name
Property value
Format
int
Access Type
Add, Delete, Get, Replace
Default Value
0
Allowed values:
Value
Description
0 (Default)
Enable Saving Snapshots for Windows.
1
Disable Saving Snapshots for Windows.
Group policy mapping:
Name
Value
Name
DisableAIDataAnalysis
Friendly Name
Turn off saving snapshots for use with Recall
Location
Computer and User Configuration
Path
Windows Components > Windows AI
Registry Key Name
SOFTWARE\Policies\Microsoft\Windows\WindowsAI
Registry Value Name
DisableAIDataAnalysis
ADMX File Name
WindowsCopilot.admx
DisableCocreator
Scope
Editions
Applicable OS
✅ Device ❌ User
✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC
This policy setting lets you define a list of URIs that won't be included in snapshots for Recall when a supported browser is used. People within your organization can use Recall settings to add more websites to the list. Define the list using a semicolon to separate URIs.
For example: https://www.Contoso.com;https://www.WoodgroveBank.com;https://www.Adatum.com
Adding https://www.WoodgroveBank.com to the list would also filter https://Account.WoodgroveBank.com and https://www.WoodgroveBank.com/Account.
Ważne
Changes to this policy take effect after device restart.
Description framework properties:
Property name
Property value
Format
chr (string)
Access Type
Add, Delete, Get, Replace
Allowed Values
List (Delimiter: ;)
Group policy mapping:
Name
Value
Name
SetDenyUriListForRecall
Friendly Name
Set a list of URIs to be filtered from snapshots for Recall
Location
Computer and User Configuration
Path
Windows Components > Windows AI
Registry Key Name
SOFTWARE\Policies\Microsoft\Windows\WindowsAI
Registry Value Name
SetDenyUriListForRecall
ADMX File Name
WindowsCopilot.admx
SetMaximumStorageDurationForRecallSnapshots
Scope
Editions
Applicable OS
✅ Device ✅ User
✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC
This policy setting allows you to control the maximum amount of disk space that can be used by Windows to save snapshots for Recall.
You can set the maximum amount of disk space for snapshots to be 10, 25, 50, 75, 100, or 150 GB.
When this setting isn't configured, the OS configures the storage allocation for snapshots based on the device storage capacity.
25 GB is allocated when the device storage capacity is 256 GB. 75 GB is allocated when the device storage capacity is 512 GB. 150 GB is allocated when the device storage capacity is 1 TB or higher.
Description framework properties:
Property name
Property value
Format
int
Access Type
Add, Delete, Get, Replace
Default Value
0
Allowed values:
Value
Description
0 (Default)
Let the OS define the maximum storage amount based on hard drive storage size.
10240
10GB.
25600
25GB.
51200
50GB.
76800
75GB.
102400
100GB.
153600
150GB.
Group policy mapping:
Name
Value
Name
SetMaximumStorageSpaceForRecallSnapshots
Friendly Name
Set maximum storage for snapshots used by Recall
Location
Computer and User Configuration
Path
Windows Components > Windows AI
Registry Key Name
SOFTWARE\Policies\Microsoft\Windows\WindowsAI
Registry Value Name
SetMaximumStorageSpaceForRecallSnapshots
ADMX File Name
WindowsCopilot.admx
TurnOffWindowsCopilot
Uwaga
This policy is deprecated and may be removed in a future release.
Scope
Editions
Applicable OS
❌ Device ✅ User
✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 21H2 [10.0.19044.3758] and later ✅ Windows 10, version 22H2 with KB5032278 [10.0.19045.3758] and later ✅ Windows 11, version 22H2 with KB5030310 [10.0.22621.2361] and later ✅ Windows 11, version 23H2 [10.0.22631] and later
This policy setting allows you to turn off Windows Copilot.
If you enable this policy setting, users won't be able to use Copilot. The Copilot icon won't appear on the taskbar either.
If you disable or don't configure this policy setting, users will be able to use Copilot when it's available to them.
Uwaga
The TurnOffWindowsCopilot policy isn't for the new Copilot experience that's in some Windows Insider builds and that will be gradually rolling out to Windows 11 and Windows 10 devices.
This policy also applies to upgrade scenarios to prevent installation of the Copilot app from an image that would have had the Copilot in Windows pane.
This module focuses on how to effectively administer Microsoft 365 Copilot, which is vital for optimizing the performance and security of an organization's digital infrastructure.
Prezentacja podstaw zabezpieczeń danych, zarządzania cyklem życia, zabezpieczeń informacji i zgodności w celu ochrony wdrożenia platformy Microsoft 365.