Policy CSP - CloudPCDevice

AllowAnyUserReset

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
❌ Enterprise
❌ Education
❌ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 11, version 24H2 [10.0.26100] and later
./Device/Vendor/MSFT/Policy/Config/CloudPCDevice/AllowAnyUserReset

Controls whether any user (including unauthenticated) can initiate device reset operations. 0 = Not allowed. 1 = Allow Refresh only (keeps enrollment data) for any user (default). 2 = Allow full device reset for any user.

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Not allowed.
1 (Default) Allow Refresh only (persist enrollment data).
2 Allow full device reset.

AllowAuthenticatedUserReset

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
❌ Enterprise
❌ Education
❌ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 11, version 24H2 [10.0.26100] and later
./Device/Vendor/MSFT/Policy/Config/CloudPCDevice/AllowAuthenticatedUserReset

Controls whether authenticated users can initiate device reset operations. 0 = Not allowed. 1 = Allow Refresh only (keeps enrollment data, reset proceeds only if user is authenticated) (default). 2 = Allow full device reset (clears enrollment, requires authentication).

Description framework properties:

Property name Property value
Format int
Access Type Add, Delete, Get, Replace
Default Value 1

Allowed values:

Value Description
0 Not allowed.
1 (Default) Allow Refresh only (persist enrollment data).
2 Allow full device reset.

Policy configuration service provider